Privacy notice

Two roles

Your customers’ data (names, phones, cars, jobs, invoices, messages): your shop decides why and how it is used — the shop is the controller and we are the processor. The data processing agreement (Settings → Privacy in the app) sets out what we may do with it: only run the service for you.
Your own account data (the people of the shop who sign in, the shop’s billing details, support tickets): we are the controller. This notice is about that data.

What we collect and why

Data	Why	Legal basis
Name, e-mail, phone, password (stored as a one-way hash)	To give you an account and sign you in	Contract
The shop’s details and billing details	To provide the service and charge for it	Contract; legal obligation (invoices)
Sign-in history (time, address, device)	To keep accounts safe and stop misuse	Legitimate interest (security)
What you write to support, with the page and browser you were on	To answer you	Contract
How the app is used, without cookies and without identifying you	To improve the app	Legitimate interest

How long we keep it

Sign-in history: 12 months. Support tickets: as long as your account exists, then 12 months. Invoices for your subscription: as long as tax law requires. When you close your account, your shop’s data is deleted after the period in the data processing agreement; you can export everything first (Settings → Export all data).

Your rights

You can ask for a copy of your data, its correction or erasure, restrict or object to processing, and move it elsewhere. Write to our privacy contact (the address is in the app under Settings → Privacy). You can also complain to your data protection authority (Cyprus: the Commissioner for Personal Data Protection; Greece: the Hellenic Data Protection Authority).

Where the data is

In the European Union. The sub-processors page lists who helps us, and where.