Privacy Policy

Last updated: 2026-06-10

Who we are

Faktwise is operated by Emanuel Luís (sole trader, Portugal), referred to as "we". Contact: support@faktwise.com. For invoice data processed on behalf of merchants, the merchant is the controller and we act as processor under the Data Processing Agreement.

What we process and why

We do not sell data, run advertising, build profiles, or use your data to train AI models.

Retention

Issued invoices are retained for 10 years (statutory retention, e.g. §14b UStG/§147 AO in Germany). Erasure requests for invoice data are subject to the Art. 17(3)(b) GDPR exemption (compliance with a legal obligation). Operational data (sessions, tokens, settings) is deleted within 48 hours of app uninstallation via Shopify's shop/redact webhook.

Where data lives

All data is hosted in the EU (Paris, France) with alwaysdata SAS as our hosting subprocessor. Transport is TLS-encrypted; access tokens are encrypted at rest.

Cookies and tracking

This website sets no cookies and runs no analytics or tracking scripts. The Faktwise app itself uses only strictly necessary session cookies required for secure login inside the Shopify admin. There is no advertising, no profiling and no automated decision-making.

Server logs and support email

Our hosting provider (alwaysdata SAS, Paris) keeps standard web server logs including IP addresses for security and operations (legal basis: legitimate interest, Art. 6(1)(f) GDPR); logs are deleted on a rolling basis. Support emails to support@faktwise.com are handled in a mailbox hosted by alwaysdata and forwarded to a mailbox at Proton AG (Switzerland, a country with an EU adequacy decision) so we can answer you quickly.

Your rights

Access, rectification, erasure (within legal-retention limits), restriction, portability, objection: write to support@faktwise.com. Store customers should contact the merchant they bought from (the controller); we support merchants in fulfilling such requests.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular with the Portuguese authority CNPD (cnpd.pt) or the authority of your own member state.