1. Introduction

Appnova EU OÜ ("we," "our," or "us"), registered in Estonia (registry code 17175318), operates the Invoice Maker application and the website www.appnova.io (collectively referred to as the "Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We take your privacy seriously and are committed to protecting your personal data in accordance with the European Union's General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

2.1 Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). This may include, but is not limited to:

• Email address
• First name and last name
• Phone number
• Address, postal code, city, and country
• Business details including business name, business identification numbers
• Payment information
• Usage data and application interaction

2.2 Invoice Data

Our Service allows you to create, manage, and store invoices. This includes:

• Client names and contact information
• Products or services details
• Pricing information
• Payment records
• Invoice history

2.3 Blacklist Data

Our Service provides the functionality to add clients to a blacklist. When you add a client to your blacklist, we collect and store information about:

• The client being blacklisted
• Your identity as the user who created the blacklist entry
• Date and time of blacklisting
• Any additional information or notes you provide about the blacklisting

If you choose to use the blacklist query feature to check other users' blacklisted clients, you must agree to share your own blacklist data. This reciprocal sharing arrangement creates a network of shared blacklist data among our users.

2.4 Usage Data

We may also collect information on how the Service is accessed and used ("Usage Data"). This may include information such as your device's Internet Protocol address (IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

2.5 Tracking & Cookies Data

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

3. Use of Data

Appnova EU OÜ uses the collected data for various purposes:

• To provide and maintain our Service
• To notify you about changes to our Service
• To allow you to participate in interactive features of our Service when you choose to do so
• To provide customer support
• To gather analysis or valuable information so that we can improve our Service
• To monitor the usage of our Service
• To detect, prevent and address technical issues
• To fulfill any other purpose for which you provide it
• To process payments and prevent fraudulent transactions
• To provide invoice creation, management, and delivery services
• To facilitate communication between you and your clients regarding invoices and payments
• To operate and maintain the blacklist feature, allowing users to share information about problematic clients

4. Legal Basis for Processing

We will only collect and process your personal data where we have a legal basis to do so. The legal bases depend on the services you use and how you use them. This means we collect and use your information only where:

• We need it to provide the Service, including operating the Service, providing customer support, personalized features, and protecting the safety and security of the Service;
• It satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, to market and promote the Service, and to protect our legal rights and interests;
• You give us consent to do so for a specific purpose; or
• We need to process your data to comply with a legal obligation.

5. Data Retention

Appnova EU OÜ will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.

Blacklist data will be retained for as long as you maintain your account with us, or until you remove a client from your blacklist. If your account is terminated, we may retain blacklist data for a reasonable period to comply with legal obligations or to protect the legitimate interests of other users.

6. Transfer of Data

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside Estonia and choose to provide information to us, please note that we transfer the data, including Personal Data, to Estonia and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

Appnova EU OÜ will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

7. Disclosure of Data

7.1 Business Transaction

If Appnova EU OÜ is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.

7.2 Disclosure for Law Enforcement

Under certain circumstances, Appnova EU OÜ may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

7.3 Blacklist Information and Legal Proceedings

If a third party company or individual that has been blacklisted initiates legal proceedings to be removed from the blacklist or to discover who has added them to the blacklist, we may be required to disclose this information to a court of law or other legal authorities. By using our blacklist feature, you acknowledge and agree that we may disclose your identity as the creator of a blacklist entry in response to a valid legal request.

7.4 Service Providers

We may employ third-party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services, or to assist us in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Such Service Providers may include:

• Payment processors
• Cloud storage providers
• Analytics providers
• Email service providers

7.5 Blacklist Sharing Between Users

If you choose to use the blacklist query feature to check whether a client has been blacklisted by other users, you must consent to share your own blacklist data. This means that other users who also opt into this feature will be able to see the clients you have blacklisted, but not your personal identifying information. Your identity as the creator of a blacklist entry will only be disclosed to other users if required by a valid legal process as described in section 7.3.

8. Security of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

We implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your personal information, including:

• Encryption of data at rest and in transit
• Regular security assessments
• Access controls and authentication requirements
• Regular monitoring and logging of system activities

9. Your Data Protection Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. Appnova EU OÜ aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

Your rights include:

• The right to access, update or delete the information we have on you
• The right of rectification - the right to have your information corrected if it is inaccurate or incomplete
• The right to object to our processing of your Personal Data
• The right of restriction - the right to request that we restrict the processing of your personal information
• The right to data portability - the right to receive a copy of your information in a structured, machine-readable and commonly used format
• The right to withdraw consent at any time where we relied on your consent to process your personal information

Please note that we may ask you to verify your identity before responding to such requests.

You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the European Economic Area (EEA).

10. Children's Privacy

Our Service does not address anyone under the age of 16 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 16. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.