Privacy Policy

The data controller is Michal Antal (živnostník), Kollárova 3, 903 01 Senec, Slovensko, IČO: 53076966 · DIČ: 1124636909, phone +421 940 595 800, email m.antal.work@gmail.com. We process personal data in line with Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on personal data protection.

• Account data — first and last name, email address, phone number (in international format, must be unique) and a password stored only as a hash. The account also carries your interface language and billing currency. When you sign in with Google we receive only your name and email address.
• Content you enter — projects, areas, price lists, client contacts and quotes, including your company's invoicing details for document headers. You are responsible for lawfully entering any third-party data.
• Partner details — if you join the partner programme we also process your trading name, address, country, company and tax IDs and bank account (IBAN). From a partner who is a private individual we additionally process the date of birth and, before the first payout, the national ID number. It is stored encrypted, never returned to the application, and shown in administration only as its last four digits.
• Partner attribution — if you signed up through a partner's link or code, we record which partner you belong to. That partner sees your trading name (or a placeholder identifier if you left it empty), the sign-up date, the chosen plan, the subscription status and their own commission. They do not see your email, phone number, projects, areas or quotes.
• Company logo — the image you upload for quote headers. It is stored in public storage (section 5).
• Technical data — server logs and IP addresses, used for security and abuse prevention (legitimate interest), including at sign-up and sign-in.
• Sketch photos — photos you upload for AI conversion, including through the mobile link /u/…. Kept for at most 24 hours (section 8).
• AI usage records — when and how often you used an AI redraw, for plan quotas and the daily cost cap.
• Subscription data — plan, status and the card details Stripe passes to us: card brand, last four digits and an anonymous card fingerprint (never the card number), used to prevent multi-account abuse (legitimate interest). The card number is handled solely by Stripe.
• Cancellation feedback — a voluntary reason and optional message when you cancel, used to improve the service. Providing it is never a condition of cancelling and it is deleted with your account.
• Marketing consent — whether you opted in to our newsletter and when you gave or withdrew that consent.
• Sign-up attempts — IP address and time, to rate-limit registrations from one address (legitimate interest).

• Providing the service and managing your account — Art. 6(1)(b), contract.
• Accounting and tax duties for paid plans — Art. 6(1)(c), legal obligation.
• Security, abuse prevention and server logs — Art. 6(1)(f), legitimate interest.
• Partner programme — Art. 6(1)(b), performance of the contract with the partner; for the national ID number and tax withholding Art. 6(1)(c), legal obligation. Telling a partner which client is attributed to them is Art. 6(1)(f), the legitimate interest of both sides in settling the commission, limited to the details listed in section 2.
• Newsletter and offers by email — Art. 6(1)(a), consent. Consent is optional, given at sign-up or later in settings, and can be withdrawn at any time through the toggle in settings or the unsubscribe link in the email. We record both the consent and its withdrawal with a timestamp, and your address is added to (or removed from) the subscriber list at our email provider (section 4).

Transactional emails — sign-up confirmation, password reset, subscription notices — are not marketing; we send them to perform the contract and they cannot be unsubscribed separately.

• Supabase — database, authentication and file storage.
• Cloudflare — hosting, CDN and network protection.
• Stripe — payment gateway for paid plans; card data is handled directly by Stripe and we have no access to it.
• Resend — email delivery. All transactional emails (sign-up confirmation, password reset, subscription notices) and, where you consented, the newsletter subscriber list go through it.
• AI service provider — currently Google (Gemini API) on a paid tier where submitted data is not used to train models. A sketch photo is sent only to be redrawn. We may change provider in future; it will always be a paid tier without training on your data, and this page will be updated.
• Google (Google Analytics via Google Tag Manager): anonymous traffic statistics for the public website. Measurement starts only after you consent in the cookie bar; without it nothing loads and no analytics script runs.

When you sign in with a Google account, Google acts as the sign-in provider and we receive only your name and email address. We never sell your data or share it for marketing.

Public quote link. You can share a quote through a link containing a random token. It needs no sign-in and no password — anyone who has the link sees the whole quote, including the client's name and details and all amounts. You can revoke it or generate a new one at any time, so consider who you send it to and how.

Company logo. The logo for quote headers is stored in public storage. Anyone who knows the exact file address can view it without signing in, although the storage listing itself is not public. Do not upload anything as a logo that should stay private.

Quote PDFs. Generated PDFs live in private storage and are served either through the public quote link or through a temporary signed link.

When resolving a reported fault or a support request, the operator can sign in to your account and see it as you see it. We do this only where it is necessary to solve the problem. Every such sign-in is written to an audit log — who, when, into which account and for what reason. Interventions into subscriptions and limits are audited the same way.

As the system administrator the operator also has technical access to the service database, used only to run it, back it up and fix faults.

Our providers may process data outside the EU/EEA under Standard Contractual Clauses approved by the European Commission or the EU-US Data Privacy Framework.

• Account data and your content — for the lifetime of the account. Deleting the account in the application really deletes the data, including uploaded files.
• Sketch photos — at most 24 hours. A photo is deleted as soon as your computer picks it up into the editor; photos never picked up are removed by a daily job after 24 hours.
• Sign-up attempt records — 24 hours.
• IP addresses, server logs and AI usage records — for the lifetime of the account.
• Card fingerprints — for the lifetime of the account; they prevent opening multiple accounts.
• Accounting records for payments — for as long as tax and accounting law requires, including after the account is closed.
• The commission ledger and partner details — for as long as tax and accounting law requires, including after the partner's account is closed. Closing the account suspends the partner code, so it attracts no further clients.

When you delete a client in the application, their name and details remain in quotes already issued and in generated PDFs. That is deliberate — a quote is a record and has to stay as it was sent. If you need those removed too, delete the quotes concerned or contact us.

Besides cookies, the application keeps some preferences in your browser's local storage (localStorage and sessionStorage). None of it is tracking — without it the service would either not keep you signed in or would forget your settings.

• Functional cookies — sign-in and session (Supabase auth).
• Cookies pp.lang and pp.cur — your language and currency, a copy of the profile setting so the server can send the page in the right language and currency straight away.
• Local storage — technical preferences: onboarding and tips state, custom keyboard shortcuts, panel and dashboard state, your cookie consent choice, and the "remember sign-in" choice.
• Analytics (Google Analytics): anonymous traffic statistics for the public website, loaded only with your consent.

Analytics (Google Analytics via Google Tag Manager) loads only when you click "Agree" in the cookie bar. If you choose "Essential only" or close the bar, no analytics script loads. We use no advertising tools. You can withdraw consent at any time by clearing cookies and local storage in your browser; you will also lose saved preferences and be signed out.

Under Articles 15–22 GDPR you may request access, rectification, erasure, restriction, portability, object to processing and withdraw consent at any time (withdrawal does not affect the lawfulness of processing before it). You can unsubscribe from the newsletter yourself in settings or through the link in the email footer, and you can delete your account and all its data directly in the application. For other requests write to m.antal.work@gmail.com. You may also lodge a complaint with the Slovak Data Protection Office (dataprotection.gov.sk).