Privacy Policy

Data Controller

Introduction

We are committed to protecting your privacy and personal data in accordance with the General Data Protection Regulation (GDPR) and Slovak Act No. 18/2018 Coll. on Personal Data Protection.

This Privacy Policy explains how we collect, use, and protect your personal information when you use ServiceFlow.

Data We Collect

We collect the following personal data:

• Name and contact information (email, phone number)
• Company information (name, IČO, DIČ, IČ DPH, address)
• Account credentials (email and encrypted password)
• Service usage data (jobs, invoices, client records)
• Technical data (IP address, browser type, device information)

Purpose of Processing

We process your data for the following purposes:

• Providing and maintaining the ServiceFlow service
• Managing your account and authentication
• Processing invoices and business documents
• Improving our services and user experience

Legal Basis for Processing

We process your personal data based on:

• Contract Performance: Processing necessary to provide the ServiceFlow service
• Consent: For marketing communications and optional features
• Legitimate Interest: For service improvement and security purposes
• Legal Obligation: For compliance with tax and accounting regulations

Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we retain data for up to 10 years as required by Slovak accounting and tax legislation (Act No. 431/2002 Coll. on Accounting).

Your Rights

Under GDPR and Slovak law, you have the following rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ('right to be forgotten')
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time

To exercise any of these rights, please contact us at the email address below.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, and access controls.

Third Party Sharing

We do not sell your personal data. We may share data with service providers who assist in operating our platform (hosting, email services) under strict data processing agreements compliant with GDPR requirements.

Supervisory Authority

You have the right to lodge a complaint with the Slovak Data Protection Authority:

Contact Us

For any questions regarding this Privacy Policy or your personal data, please contact us at: privacy@serviceflow.app