Information We Collect

When you interact with our budget approval workflow platform, we collect several types of information to provide you with the best possible service. This includes information you provide directly and information we gather automatically through your use of our services.

• Personal identification information including name, email address, and job title
• Company information such as organization name, industry sector, and size
• Financial workflow data related to budget approval processes
• Usage data including login times, feature usage patterns, and system interactions
• Technical information such as IP address, browser type, and device information
• Communication records including support requests and feedback

How We Use Your Information

Your information helps us deliver, maintain, and improve our budget approval workflow services. We use this data thoughtfully and only for legitimate business purposes that benefit your experience with our platform.

1. Providing and maintaining our budget approval workflow platform
2. Processing and managing your account and subscription
3. Delivering customer support and responding to your inquiries
4. Improving our services based on usage patterns and feedback
5. Sending important service updates and security notifications
6. Ensuring compliance with financial regulations and security standards

We never sell your personal information to third parties or use it for purposes unrelated to our services. Any marketing communications we send are optional and can be disabled at any time through your account settings.

Data Storage and Security

We take data security seriously, especially given the sensitive nature of financial workflow information. Our security measures are designed to protect your data both in transit and at rest, following industry best practices and Bulgarian data protection requirements.

Your Rights Under Bulgarian and EU Law

As our platform operates within Bulgaria and serves clients across the European Union, you have specific rights regarding your personal data. These rights are protected under the General Data Protection Regulation (GDPR) and Bulgarian Personal Data Protection Act.

• Right to access your personal data and receive copies of information we hold
• Right to correct inaccurate or incomplete personal information
• Right to request deletion of your personal data under certain circumstances
• Right to restrict processing of your data in specific situations
• Right to data portability and to receive your data in machine-readable format
• Right to object to processing based on legitimate interests
• Right to withdraw consent for data processing where consent is the legal basis

To exercise any of these rights, contact us using the information provided at the end of this policy. We'll respond to your request within 30 days and may need to verify your identity before processing certain requests.

Data Sharing and Third Parties

We maintain strict controls over data sharing and only work with trusted service providers who meet our security standards. Any third-party access to your data is limited to what's necessary for service delivery and is governed by strict contractual agreements.

• Cloud hosting providers for secure data storage and platform operations
• Payment processors for handling subscription and billing transactions
• Email service providers for sending system notifications and communications
• Analytics services to understand platform usage and improve user experience
• Legal authorities when required by law or to protect our legitimate interests

Data Retention Periods

We keep your information only as long as necessary to provide our services and meet legal obligations. Our retention periods are based on the type of information, how it's used, and applicable legal requirements in Bulgaria.

• Account information: Retained while your account is active plus 7 years for tax compliance
• Financial workflow data: Kept for duration of service plus 5 years as required by Bulgarian law
• Usage logs and analytics: Automatically deleted after 24 months
• Support communications: Retained for 3 years to maintain service quality
• Marketing preferences: Kept until you withdraw consent or close your account

When data reaches the end of its retention period, we securely delete it from our systems. You can also request earlier deletion of certain types of data by contacting our privacy team.

International Data Transfers

While our primary operations are based in Bulgaria, some of our service providers may process your data in other countries. When this happens, we ensure appropriate safeguards are in place to protect your information according to EU standards.

Any international transfers comply with GDPR requirements through approved mechanisms such as Standard Contractual Clauses or adequacy decisions by the European Commission. We regularly review these arrangements to maintain the highest protection standards.

Cookies and Tracking Technologies

Our platform uses cookies and similar technologies to enhance your experience and provide essential functionality. We categorize these technologies based on their purpose and give you control over non-essential cookies.

• Essential cookies: Required for platform functionality and security
• Performance cookies: Help us understand how users interact with our platform
• Functional cookies: Remember your preferences and settings
• Analytics cookies: Provide insights for improving our services

You can manage cookie preferences through your browser settings or our cookie management tool. Note that disabling essential cookies may affect platform functionality.

Changes to This Privacy Policy

We may update this privacy policy periodically to reflect changes in our practices, legal requirements, or service improvements. When we make significant changes, we'll notify you through your account dashboard and via email.

Minor updates may be made without direct notification, but we'll always update the effective date at the top of this policy. We encourage you to review this policy periodically to stay informed about how we protect your information.