Privacy policy for the TWT Invoice app

Scope

This privacy policy applies to the TWT Invoice Android app (de.tatwelletech.invoice) of TWT- Tat Welle Tech GbR. It adds to our privacy policy for the website.

Controller

What the app is

The app is a way into your account on our platform. It shows and edits the same data as the web portal. No business data stays on the device, except documents you save there yourself.

Which data is processed

• Account data: your name and e-mail address, to sign you in and to manage your account (Art. 6(1)(b) GDPR).
• Your company's business data that you enter yourself: invoices, quotes, delivery notes, payment status and the details of your customers (name, address, e-mail, phone, VAT ID). We process this data on behalf of the company that holds the account (Art. 28 GDPR).
• Files you choose to have an e-invoice validated or converted.
• A record of the changes made to documents, for security and to keep the books traceable as German bookkeeping rules require (Art. 6(1)(c) and (f) GDPR).
• For notifications: an identifier of this installation, the device model and the app's version. Notifications are sent by our own service on our own servers, not through Google Firebase. The identifier is deleted when you sign out.

What the app does not do

The app shows no advertising, uses no advertising ID, contains no analytics or tracking services and reads neither contacts nor photos. It does not collect any location.

Unlocking with your fingerprint

When you unlock the app with your fingerprint, the match is made by Android on your device alone. We receive no biometric data.

Security and where the data lives

Every connection is encrypted (TLS). The app's sign-in credentials are kept in Android's protected key store. The platform runs on our own servers in Germany.

Retention and deletion

Account data is kept for the term of the contract. After the contract ends, the data can be exported for 30 days; then access is closed, and all data that need not be kept is deleted within 30 days. Records that tax law requires us to keep are kept until the legal period ends: eight years (§ 147 AO, § 14b UStG).

How to request the deletion of your account

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a supervisory authority. Our privacy policy gives the details and names the competent authority:

Privacy Policy

To exercise any of these rights, please contact us at: info@tatwelletech.com