Privacy Policy of eFirma

Introduction

We at "eFirma Ltd" (UIC: 207862678, address: Bulgaria, Sofia, Manastirski Livadi district, 24 Kazbek St.) respect the privacy of your data and are committed to protecting it in accordance with applicable regulations, including the General Data Protection Regulation (GDPR) of the European Union. This Privacy Policy aims to inform you about how we collect, use, store, and protect the personal data you provide when using our application "eFirma."

1. What Information Do We Collect?

When you use our application, we collect the following categories of data:

1.1. Registration Data: Names, password, email address, location, language preferences, and other data you provide during registration.

1.2. Company Data: Company name, UIC, VAT number, registered office, manager’s name, phone number, email, logo, bank accounts, and other company information necessary for the subsequent process.

1.3. Partner Data: Name, contact information, and other data you enter regarding your business partners.

1.4. Document Data: All data related to issued revenue and expense documents, including numbers, dates, names and details of suppliers and recipients, information about goods and services, amounts, currencies, payment methods, and attached files.

1.5. Item Data: Names, prices, categories, and other information about the products and services you enter.

1.6. Additional Information: Any other information entered or uploaded into the application, including notes, selected options, or confirmations.

2. How Do We Use Your Data?

We use the personal data collected for the following purposes:

2.1. Execution of the Application’s Core Functions: Maintenance and facilitation of the accounting process through document management, providing financial analysis, and creating a shared workspace.

2.2. Service Optimization: Analyzing how the application is used in order to improve it and fix errors (see section 4).

2.3. Compliance with Legal Obligations: We store and process your data in accordance with relevant legal provisions related to financial and tax reporting.

3.1. Your personal data may be shared with external providers (third parties) when this is necessary to support and optimize the work of eFirma. These third parties process the data for the purpose of providing services that support the functioning of the application. eFirma Ltd does not sell your data, nor provide it for any remuneration or other benefits to third parties to use it for their own commercial and/or marketing purposes and benefits.

3.2. We endeavor to select partners and service providers that comply with legal requirements for the protection of personal data. However, we are not responsible for violations or abuses by third parties if they use user data outside of the scope agreed with us.

4. Cookies and Usage Analytics

4.1. The application and the website use only cookies necessary for their operation: to keep you signed in and to remember your language.

4.2. To understand how the application is used and to detect errors, we use PostHog, hosted in the EU. It collects usage data, technical errors, and session recordings in which form inputs are masked. After you sign in, this data is linked to your account. Recordings are kept for 30 days and other usage data for up to 12 months.

5. Data Storage and Security

We store your data securely and take the necessary technical and organizational measures to prevent unauthorized access, loss, or destruction of data. In case of a data breach, we will notify you in accordance with applicable legal requirements.

6. Your Rights

6.1. Right of Access: You have the right to receive confirmation of whether we process your personal data and to obtain a copy of it.

6.2. Right to Rectification: You have the right to request the correction of inaccurate or incomplete data.

6.3. Right to Erasure: You have the right to delete your account and all associated data via the Company Settings page. Once deleted, the data will also be removed from third-party systems, and the usage data described in section 4 expires within the periods stated there. Please note that this operation is irreversible.

6.4. Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format.

6.5. Right to Object: You may object to the processing of your data for specific purposes, such as marketing.

7. Questions and Contact

If you have any questions regarding this Privacy Policy or wish to exercise your rights, you can contact us through the contact form on our website.

8. Changes to the Privacy Policy

We may periodically update this Privacy Policy. All changes will be published on the website and in the application, and we advise you to regularly review this page.

This Privacy Policy is effective from 2024 and was last updated on 3 September 2026.