Back

Privacy Policy

Last updated: 17 October 2026

1. Information We Collect

We collect: (a) your email address, for your account and login; (b) your Hiboutik API credentials; (c) shop and vendor data synced from Hiboutik (names, addresses, SIRET, commission settings); (d) sales lines synced from Hiboutik (product, date and time, quantity); (e) the invoices and credit notes you issue, and their journal; (f) the bug reports you send us, including screenshots.

2. Legal Basis & Purpose

We process your data based on contract fulfillment (providing the invoice generation service you signed up for). We do not use your data for marketing or profiling.

3. Data Storage & Retention

Your data is stored by Supabase in the EU (Ireland). When you close your account, we delete your account and your operational data. We keep your issued invoices, credit notes and their journal for 6 years after closure, because they are accounting records. Resolved bug reports are deleted 30 days after they are resolved.

4. Your Rights (GDPR)

You have the right to: access your data, rectify inaccuracies, request erasure, restrict processing, data portability, and object to processing. Contact privacy@autofacture.pro to exercise these rights.

5. Sub-Processors

We use: Supabase (database and file storage, EU — Ireland), Netlify (hosting, US), Resend (email delivery, US), Lemon Squeezy (card payments only; not used if you pay by bank transfer).

6. International Transfers

Netlify and Resend are based in the United States. Transfers to Netlify rely on the EU–US Data Privacy Framework, with the EU Standard Contractual Clauses as a fallback. Transfers to Resend rely on the EU Standard Contractual Clauses. Both are set out in their data processing agreements.

7. Contact

For privacy concerns: privacy@autofacture.pro. You also have the right to lodge a complaint with your local data protection authority (CNIL in France).