1. General
Fiscavo is operated by FinanceSpark Solutions LTD (Limassol, Cyprus), the data controller for the personal data described here. We are committed to processing your data lawfully, fairly, and transparently. For any privacy question or to exercise your rights, contact us at privacy@fiscavo.com.
2. Data we process
- Account data. When you create an account through a third-party sign-in provider, we receive your name, email address, and profile picture. We never receive your password.
- Organization profile. Business name, address, registration and VAT numbers, bank details (IBAN/SWIFT), and invoicing preferences you enter.
- Client & invoice data. Details about the clients you bill and the invoices you create — names, addresses, tax IDs, line items, amounts, and payment status. This may include personal data about your clients, for which you are the controller and we act as your processor.
- Technical & usage data. IP address, browser/device information, and server logs generated when you use the service, for security and reliability.
- Public API requests. If you use our public invoice-generation API, we log the request (including the payload you send and your IP) to operate, secure, and rate-limit the service.
3. Why we process your data
- To provide the service (create your account, store and render your invoices) — performance of our contract with you (GDPR Art. 6(1)(b)).
- To secure and improve the service (logging, rate-limiting, abuse prevention) — our legitimate interests (Art. 6(1)(f)).
- To meet legal obligations (e.g. responding to lawful requests, keeping required records) — Art. 6(1)(c).
We do not sell your personal data, and we do not use it for advertising or profiling.
4. How we use and share your data
To run Fiscavo we rely on a small number of trusted third-party service providers — for application and database hosting, authentication and sign-in, content delivery, and email. They process personal data only on our instructions, under appropriate data-protection terms, and only as needed to provide the service.
Your invoice and account data is hosted within the EU. Where a provider processes limited data outside the EEA, that transfer is covered by an adequacy decision or the EU Standard Contractual Clauses. We may also disclose data where required by law, or to protect the rights, safety, and security of Fiscavo, our users, or the public.
5. Storage and security
We keep your account, organization, client, and invoice data for as long as your account is active. When you delete data or close your account, we remove it from active systems; some records may persist briefly in backups and in our audit trail before being overwritten, and we may retain what we are legally required to keep. Public API request logs are kept only as long as needed to operate and secure the API.
We protect your data with encrypted transport (HTTPS), tenant isolation so one organization cannot access another's data, and access controls on our infrastructure. No system is perfectly secure, but we work to protect your data and to limit who can access it.
6. Your rights
Under the GDPR you can ask us to:
- access the personal data we hold about you;
- correct inaccurate data, or complete incomplete data;
- delete your data (“right to be forgotten”);
- export your data in a portable format;
- restrict or object to certain processing.
To exercise any of these, email privacy@fiscavo.com. You also have the right to complain to your local data protection supervisory authority.
7. Cookies
We use a single essential cookie to keep you signed in. We do not use advertising or third-party tracking cookies. Privacy-respecting, aggregate analytics may be used to understand traffic without identifying you.
8. Changes to this policy
We may update this policy as the service evolves. We will change the effective date above and, for material changes, take reasonable steps to let you know.
9. Contact
Questions about your privacy? Email privacy@fiscavo.com.