Privacy Policy

Last updated: October 2026

1. Data Controller & Data Collection

GDE Systems OÜ is the data controller under GDPR (EU 2016/679). Contact: support@gde.ee. We collect only the data needed to provide the service: email, name, workspace settings and the data you enter.

2. Zero Ad-Cookies & Local Storage

We use strictly necessary functional session tokens stored in browser localStorage. No third-party tracking, advertising pixels, or cross-site profiling scripts are executed.

3. Service providers & integrations

The optional AI company lookup sends only the company name or registry code you search for to our AI provider (Google); invoice and client data are not sent. Contact-form messages and account emails are delivered via Resend. If you connect OneDrive or Google Drive, documents are stored directly in your own cloud space.

4. GDPR Rights & Erasure

You hold complete rights to access, export, or permanently delete your account and encrypted data at any time via your workspace settings.

5. Hero invoice generator (sandbox)

When you use the public sample-invoice generator, your invoice draft stays in your browser tab and is not stored in our database. To send the one-time e-mail code, we process your e-mail address and a hash of the draft. After verification we keep your e-mail as a verified contact for 90 days, or for 24 months if you opt in to product updates. Invoice amounts, counterparties, IBAN and line items are never stored. The PDF is a sample and is not an invoice for accounting, tax or payment purposes. Legal bases: performance of your request, security/fraud prevention, and consent for marketing. To request access or erasure, write to privacy@gde.ee.