Privacy Policy
The controller of the Mobilné Faktúry service is TaskLogy s. r. o., Ulica Farský briežok 858/41, 029 56 Zákamenné, Slovakia, Company ID 54728835, registered in the Commercial Register of the District Court Žilina, Section Sro, Insert 80101/L (“TaskLogy”). The contact point for data protection matters is info@tasklogy.sk.
What data we process
- account data: name, email address, optional phone number, account verification and security records,
- data about your organisation, its members, clients, suppliers and contact persons,
- invoices, quotations, orders, receipts, payments, bank statements and related attachments,
- bank account numbers (IBAN, SWIFT) of your organisation and of your clients and suppliers, either entered by you or read from a document,
- when you send an invoice by email from the app: recipients, subject and message body,
- photos and documents that you knowingly upload or capture,
- data about your plan, feature usage and your organisation’s billing documents,
- technical data necessary for security and operation, such as IP address, request time, session identifier, error logs and the device push token.
Purposes and legal bases
We process data to create and secure your account, provide the service you ordered, process documents, communicate with you, provide support, protect against misuse, comply with legal obligations and establish or defend legal claims. The legal bases are primarily the performance of a contract, compliance with legal obligations, our legitimate interest in secure operation, and consent where consent is required.
External services and recipients
Depending on the feature you use, data may be processed by providers of hosting and encrypted backups, email services, Apple and Google for the functioning of the mobile platform, Firebase/Expo for push notifications, Foxentry when looking up company details, the Slovak Financial Administration when you request verification of an eKasa receipt, and OpenAI when you start AI processing of a document. We disclose only the data necessary for the given purpose and apply appropriate contractual and security measures. Where a recipient is outside the EEA, the transfer is carried out only using a mechanism recognised by EU law.
What we do not do
The app contains no advertising, no ad networks and no measurement of user behaviour. We do not use the device advertising identifier, nor any third-party analytics or crash-reporting tools, and we do not track you across other companies’ apps or websites. We do not sell your data and we do not share it with data brokers. We send you marketing messages only if you explicitly ask for them; operational emails (account verification, password reset, service notifications) are not marketing.
Roles of the parties and user age
For your account data and the operation of the service, TaskLogy acts as the controller. For the personal data you put into the service — in particular the data of your clients, suppliers and contact persons appearing on documents — your organisation is the controller and TaskLogy acts as a processor handling that data on your instructions and for the purpose of providing the service.
The service is intended for entrepreneurs and companies. It is not intended for persons under 18 years of age and we do not knowingly collect personal data from them.
Processing of documents by artificial intelligence
AI recognition of data from a document is an optional feature that runs only on your instruction and separately for each document. Before the document is sent you must tick a consent checkbox next to that specific document; a general acceptance of the terms of service is not sufficient for this purpose and we do not store the consent “forever” — we ask again for the next document.
- What is sent: the file you select for processing — a PDF or a photo of the document. It may contain personal and billing data, such as a name, address, company ID, tax ID, IBAN, item descriptions and amounts. We do not send your login credentials, the contents of other documents, or your client database. For PDFs, the file name is sent as well. For security purposes we send a pseudonymous identifier derived from your user ID; it contains neither your name nor your email address.
- To whom: the recipient is the provider of the OpenAI API. Information about their data handling is available in the OpenAI API data policies.
- For what purpose: the sole purpose is to recognise the data on the document and pre-fill it in the form. Under the standard API terms, OpenAI does not use inputs and outputs to train its models unless the customer explicitly enables such sharing.
- For how long: we disable storage of the response for later retrieval. This does not mean zero retention at OpenAI: standard security logs may include content and be retained for up to 30 days, or longer where required by law. Image and file inputs and temporary model caches may be subject to further rules stated in the provider’s documentation. On our side we record the consent given, technical data about the processing and credit consumption. The document and the pre-filled data that you save to an invoice are retained as part of your company records.
- Transfers outside the EEA: processing may also take place outside the European Economic Area. Such transfers are subject to the applicable contractual and statutory data protection safeguards. You can request information about the safeguards applied at info@tasklogy.sk.
The AI result is a suggestion, not a finished document. AI can make mistakes, so always check the supplier, the line items and the amounts before saving. You do not have to give consent — every document can be filled in manually and the feature will not run. Consent given applies to the document already sent; for the future you simply do not give it for the next document.
Photos, camera and notifications
The camera is used only with your permission, to scan a QR code or to photograph a document. Access to photos serves to select an attachment. Push notifications are optional and can be turned off in the app or in your device settings.
Retention and deletion
We retain account data for as long as the account exists and afterwards only for the period necessary to comply with legal obligations or to protect legal claims. Accounting and tax documents may be retained for the statutory period, generally ten years. Operational logs and backups have a limited retention period. Deleting an account removes personal access and mobile sessions; an organisation’s documents that must be preserved by law or that belong to other authorised members of the organisation are not deleted automatically.
We keep the record of an AI consent for at most 1095 days from the moment it is given. The IP address and browser data attached to that record are removed after 30 days or upon account closure. Automatic clean-up runs daily. Deleting a personal account does not by itself remove the company records. You can request deletion of organisation data or of specific documents at info@tasklogy.sk; we will verify that the requester is authorised and inform you which data must be retained, on what grounds and for how long.
Your rights
You may request access, rectification, erasure, restriction of processing, data portability, or object to processing. Consent may be withdrawn at any time without affecting processing carried out beforehand. Send your request to info@tasklogy.sk. You also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.
Security and cookies
We use encrypted HTTPS transport, access controls, separation of organisations, secure sessions, scanning of uploaded files and encrypted backups. The web application uses strictly necessary cookies for sign-in, form protection and session continuity; without them the signed-in service cannot work.