Privacy Policy

1. Data controller

The controller of your personal data is OÜ Pihlaõie, an Estonian private limited company. You can reach us regarding any privacy matter at info@taaraagent.ee.

2. Data we collect

We collect and process the following categories of data:

• Account data: your name and email address, provided through our authentication provider when you sign in.
• Company data: details of the companies you manage in the service, including the email addresses of team members you invite.
• Accounting connection data: API credentials for your accounting software. These are stored encrypted and are never displayed back in plain text.
• Documents and their contents: purchase invoices, bank statements (including transaction details and counterparty information), and tax export files you upload, as well as the data extracted from them.
• Usage and technical data: logs about imports and automated processing (such as processing volumes and accuracy metrics) and technical information needed to operate and secure the service.

3. How we use your data

We use the collected data to:

• provide the service: extract and classify invoice data, create entries in your accounting software, reconcile payments, and generate reports;
• improve the accuracy and quality of the service;
• provide customer support;
• keep the service secure and prevent misuse;
• comply with legal obligations.

4. Legal bases

We process personal data on the basis of performing our contract with you (providing the service), our legitimate interests (improving and securing the service), compliance with legal obligations, and, where required, your consent.

5. Sharing and sub-processors

We do not sell your data. We share data only with service providers that we need to operate the service, under data processing agreements that limit how they may use it:

• WorkOS - user authentication and sign-in;
• Vercel - application hosting and storage of uploaded files;
• OpenAI - automated extraction and classification of document data. Data submitted through the OpenAI API is not used to train OpenAI's models;
• our database hosting provider - storage of application data.

We may also disclose data where required by law or a valid request from a competent authority.

6. Cookies

The service uses only essential cookies: an authentication session cookie and a cookie that remembers your language preference. We do not use advertising or tracking cookies.

7. Data retention

We keep your data for as long as your account is active or as needed to provide the service. After that, data is deleted or anonymized, unless the law requires us to keep it longer. You can request deletion of your data at any time by contacting info@taaraagent.ee.

8. Security

Data is encrypted in transit. Accounting software credentials are encrypted at rest. Access to production data is restricted, and changes proposed by automated processing are always subject to user confirmation before they reach your accounting records.

9. Your rights

Under the GDPR you have the right to access, rectify, and erase your personal data, to restrict or object to its processing, and to data portability. To exercise these rights, contact us at info@taaraagent.ee.

If you believe we have processed your data unlawfully, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee).

10. Changes to this policy

We may update this policy from time to time. We will announce material changes on this website. The date of the latest version is shown at the top of this page.

11. Contact

For any questions about this policy or your personal data, contact OÜ Pihlaõie at info@taaraagent.ee.