Privacy Policy
This policy describes how fakts (“we”) processes personal data when you use our invoicing platform. The data controller is the operator of fakts. For any data protection question, contact info@fakts.lv.
What data we process
- Account data: your name and email address received from Google sign-in (OAuth).
- Company data: your company name, registration and VAT number, address, and bank details.
- Content data: the clients, items, and invoices you enter into the platform.
- Technical data: the authentication cookie and basic logs needed to run and secure the service.
Purpose and legal basis
- Providing the service (performance of a contract, GDPR Art. 6(1)(b)).
- Meeting legal obligations: accounting and tax requirements (GDPR Art. 6(1)(c)).
- Security and improving the service (legitimate interests, GDPR Art. 6(1)(f)).
Storage and processors
Data is stored within the European Union. We rely on the following sub-processors: Cloudflare (site delivery and file storage), Google (sign-in, and — only with your consent — Google Analytics and Google Ads for website traffic measurement and advertising), and EU-based server hosting. Where Google acts as our analytics or advertising processor, data may be transferred to the United States under the EU–US Data Privacy Framework. Invoice creation uses public sources: European Central Bank exchange rates and the Latvian Enterprise Register.
Retention
Accounting source documents are retained for as long as Latvian law requires (generally at least 5 years). Account data is kept while your account is active.
Your rights
You have the right to access, rectify, or erase your data, to restrict processing, to data portability, and to object to processing. You also have the right to lodge a complaint with the Latvian Data State Inspectorate (dvi.gov.lv). To exercise any right, email info@fakts.lv.
Cookies
We use one essential cookie: a secure authentication session cookie, which needs no consent. On our public website, only if you accept the cookie banner, Google Analytics and Google Ads may set analytics and advertising cookies. Until you accept, none are set, and you can decline or withdraw consent at any time via the banner.
Product usage analytics
We collect first-party usage data (pages visited, time spent, and feature usage) to understand how the service is used and to improve it. This first-party analytics is processed under our legitimate interest (Art. 6(1)(f) GDPR), stored in the European Union, never shared with third parties, and never used for advertising. It is associated with your account and is deleted when your account is deleted.
Website analytics & advertising (with your consent)
On our public website only, and only after you accept the cookie banner, we use Google Analytics and Google Ads (loaded through Google Tag Manager) to measure where visits come from and how well our ads perform. These run in Google Consent Mode: until you accept, no Google cookies or identifiers are set. With your consent, Google processes this data as an independent service and data may be transferred to the United States (EU–US Data Privacy Framework). You can withdraw consent at any time via the cookie banner, and opt out of Google Analytics using Google's browser add-on. The legal basis is your consent (Art. 6(1)(a) GDPR).
This is a general template. Before relying on it, have it reviewed by a lawyer for your specific circumstances.