Privacy policy

The controller is GELD DATA d.o.o., Selska cesta 90A, 10010 Zagreb, Croatia ([email protected]).

What we process

• Account: e-mail address, name, password (only as a one-way hash), and for companies the company name and OIB.
• Payments: card details are handled only by Stripe; we keep the plan, amounts, dates and invoice numbers.
• Invoices: the buyer's name, address and tax number are sent to e-računi to issue the fiscal invoice and e-invoice.
• Sign-in: the pd_session cookie (required to stay signed in, 30 days); the browser also remembers your theme (light/dark).
• Technical logs: IP address and request time, for security and abuse prevention.

Why

• performance of a contract (account, subscription, API access)
• legal obligation (issuing and keeping invoices)
• legitimate interest (security, abuse prevention)

Processors

• Cloudflare (hosting and database)
• Stripe (payments)
• e-računi (invoices and e-invoices)
• Resend (verification and password reset e-mails)

How long

Account data is kept while the account exists. Invoices and payment records are kept for 11 years as required by law. Sessions expire after 30 days; verification and reset links after 24 hours and 1 hour.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. Send requests to the contact address. You can lodge a complaint with the Croatian Data Protection Agency (AZOP).

Prices and merchants

Public price lists and Court Register data concern companies and sole traders. We do not publish data about shoppers.