Privacy Policy

1. About this document

This document explains what data stackin collects, why, and how you can access, correct, or delete your data. It doesn't replace legal advice — it's a practical summary of how the system works today.

2. Data we collect

We collect the data needed for you to use the platform and to comply with tax law when issuing invoices.

• Account: full name and email, used for login.
• Company: legal name, tax ID and address, required by law to issue an invoice.
• Digital certificate: the .pfx file and its password, needed to sign electronic invoices — stored encrypted, never in plain text.
• Issued invoices: the invoice recipient's name and tax ID — required by tax law, not collected by our choice.

3. Why we process this data

Most processing is based on legal obligation (invoicing law requires these fields) or contract execution (your account on the platform). We don't sell or share your data with third parties for marketing purposes.

4. How we protect your data

The digital certificate lives in a private bucket, never publicly accessible. The certificate password is encrypted before being saved. Your login password is never stored in plain text — only a one-way hash.

5. Your rights

You can view and edit your name and email anytime on the My Account page. You can also delete your account there — this erases your personal login data. Invoices and companies keep existing, no longer linked to your personal data, because the law requires these fiscal records to be kept for a minimum period.

6. Contact

Questions about your data? Reach out to whoever administers your account on the platform.

Summary