Last updated: February 9, 2026
We process user account data (username, email, role), authentication metadata (sessions, login security events), and audit logs related to system operations.
Data is processed for invoice workflow management, system administration, legal accountability, and security monitoring.
To improve the system, we record how signed-in staff use it: which pages and features are opened, how long each page is actively used, which buttons are clicked, which forms are started and submitted, and any errors met. These records are linked to your user account. We never record what you type, the contents of forms or documents, or search terms. The records stay on the system's own server, are visible only to the system's support team, and are deleted automatically after 180 days, or straight away if your account is erased.
Data is retained only as needed for legal and operational requirements, and is protected by access controls, audit trails, and security safeguards.
Users may request export and deletion of personal account data through available GDPR controls, subject to legal and operational constraints.