Privacy policy.

Account details: full name, VAT ID, email and phone.

Partial card details: Only the last 4 digits, card type and the cardholder’s ID number. Enough to identify your transactions, not enough to charge the card.

Transaction data: amount, date, time and merchant name — received from the acquirer only for transactions made on connected cards.

To issue an original tax invoice for every business transaction, via the tax authority interface, and deliver it to you and your accountant. That is the sole purpose of the service.

• · tax authority — for issuing original tax invoices (legally required).
• · Your card acquirer — to identify transactions on connected cards.
• · Your accountant — only if you’ve added them as a delivery target.
• · Infrastructure providers — AWS (hosting), Postgres, Stripe (only if you choose to pay by card).

We do not sell data to third parties. There were not, are not, and will not be ads based on financial data.

• · Data is transmitted via TLS and stored encrypted in the database.
• · Employee access is role-based, audited and logged.
• · Full card numbers are never stored — only last 4 digits, card type and card-holder ID.
• · DB password rotation, token deletion and customer disconnect are possible at any time from the dashboard.

Under applicable privacy law (Israeli Privacy Protection Law 1981; GDPR where applicable), you have the right to access, correct or request the deletion of data we hold about you.

Cancelling the service in one click from the dashboard deletes the card token immediately, and all personal data within 30 days (issued invoices are retained for 7 years as required by the Tax Authority).

For any privacy-related inquiry: eliyarozental@gmail.com

We respond within 30 days as required by law.