Privacy policy

Who is responsible for your data

Brza Faktura is a product of Synadra. For the data about you as a user — your account, your messages to us — Synadra is the controller.

For the data you enter about other people and companies — your clients, the buyers on your invoices, your colleagues — your company is the controller and we process that data for you, only to provide the service.

What we collect

We collect only what the service needs:

• Account: your name, email address and a protected (hashed) form of your password. If you log in with Google, we receive your name, email address and profile picture from Google.
• Company: name, tax number, registration number, address, and the eUJP user you connect with.
• Signing certificate: if you upload a certificate file, we store the file and its password in encrypted form. With a USB token, the certificate's key never reaches us.
• Business documents: the clients, products, invoices and received invoices you enter or fetch from UJP.
• Team: the email addresses of the people you invite and their roles.
• Messages to us: what you write in the contact, meeting and problem forms, together with your name, email address and, if you give them, your phone and company.
• Technical data: your IP address, the type of browser and the time of each request, kept in server logs and with the messages you send us to prevent abuse.

Why we use it and on what basis

• To provide the service you signed up for — creating, signing, sending and receiving documents (performance of a contract).
• To send your documents to UJP's e-Faktura system when you ask us to (performance of a contract, and your company's legal obligations).
• To answer your messages and help you with problems (your request, and our legitimate interest in supporting users).
• To keep the service secure and prevent abuse (our legitimate interest).
• To send you messages about your account, such as email confirmation, password reset and invitations (performance of a contract).

We do not use your data for advertising and we do not sell it.

Who receives your data

• The Public Revenue Office (UJP): the documents you send, and the requests made in your company's name, go to UJP's e-Faktura system.
• Google: only if you choose to log in with Google, or if you open the booking calendar on the “Book a meeting” page.
• Service providers that host the application and deliver our email. They act on our instructions and may not use the data for their own purposes.
• Public authorities, when the law requires it.

How long we keep it

• Account and company data: for as long as you have an account.
• Business documents: for as long as your company uses the service. Documents sent to UJP also remain in UJP's system, under UJP's own rules.
• Messages to us: for as long as we need them to answer you and to keep a record of the conversation.
• Server logs: for a limited time, for security and troubleshooting.

When you ask us to delete your account, we delete or anonymise your personal data, except where the law requires us to keep it.

Your rights

Under the Law on Personal Data Protection you have the right to:

• see which data we hold about you and get a copy of it;
• have incorrect data corrected;
• have your data deleted, or its processing restricted;
• object to processing that is based on our legitimate interest;
• receive your data in a form you can take elsewhere.

To use any of these rights, write to us through the contact page. If you believe we handle your data wrongly, you can file a complaint with the Personal Data Protection Agency (azlp.mk).

How we protect it

All communication is encrypted. Passwords are stored only as a hash. Uploaded certificates and their passwords are stored encrypted. Access inside a company is limited by roles. More detail is on the Security page.

Changes to this policy

When we change this policy we publish the new version on this page with its date. If a change is important, we also tell you by email.