Privacy policy
We collect only what we need to run Faktuno, we do not sell your data, and we do not use advertising or tracking cookies.
1. Who is responsible
Tomas Lambermont Consulting, Rodestraat 94, 1570 Galmaarden, Belgium, enterprise number 1001.751.662, is the controller for the personal data described here. Contact: hello@faktuno.be.
For the content of the invoices and other documents you create, send or receive in Faktuno (for example the name and address of your client), you are the controller and we act as your processor, as described in section 11 of our terms of service.
2. What we collect
- Account details: your name, email address and login information.
- Business details: company name, enterprise and VAT number, address, IBAN and Peppol registration.
- Documents: the invoices and credit notes you send and the documents you receive, and their delivery status.
- Billing details: your subscription, payments and invoices. Card and bank details are handled by Mollie; we do not see or store your full card number.
- Technical data: usage counters (to apply plan limits), security logs and the session cookie described below.
- Messages you send us by email.
3. Why we use it and on what legal basis
- To provide Faktuno: create your account, register you on Peppol, deliver and receive your documents — performance of our contract with you.
- To bill your subscription and keep accounting records — contract and legal obligation.
- To keep Faktuno secure, prevent abuse and apply usage limits — our legitimate interest in a safe and reliable service.
- To send you service messages (for example about changes to these terms or prices) — contract. We only send marketing emails if you agree, and you can unsubscribe at any time.
4. Who we share it with
We use the following service providers (sub-processors), under contracts that require them to protect your data:
- Cloudflare — hosting of Faktuno and its database (database stored in the EU).
- Recommand (Belgium) — certified Peppol access point that delivers and receives your documents.
- Mollie (Netherlands) — payment processing.
- An email delivery provider — to send login links and service emails.
Documents you send are, by their nature, delivered to your recipient and their Peppol provider. We may also share data when required by law or by a competent authority. We never sell your data.
5. Transfers outside the EU
Some providers are part of groups based outside the European Economic Area (for example in the United States). Where data may be accessed from outside the EEA, the transfer is covered by the EU Standard Contractual Clauses or an adequacy decision such as the EU-U.S. Data Privacy Framework.
6. How long we keep it
- Account, business details and documents: while your account is active, and 30 days after it ends so you can download your data.
- Our billing records: as long as Belgian accounting and tax law requires.
- Security logs: a short period, normally no more than 90 days.
7. Cookies
Faktuno uses one strictly necessary cookie to keep you logged in. It is not used for tracking. We do not use analytics or advertising cookies, so we do not show a cookie banner. The app may also store your work in your own browser (local storage) so that it is available on your device.
8. Security
Connections are encrypted (HTTPS), access to accounts is protected, secrets such as API keys are stored encrypted on the server, and access to data is limited to what is necessary to run the service.
9. Your rights
You can ask us to access, correct, delete or export your personal data, to restrict or object to its use, and you can withdraw any consent you gave. Email hello@faktuno.be; we reply within one month. You can also lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), www.dataprotectionauthority.be.
10. Changes
We may update this policy. The date at the top shows the latest version; we will email you about important changes.