Privacy Policy

1. Introduction

At Tixo Accounting, we are committed to protecting your privacy and ensuring the security of your personal and financial data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website, accounting service, and connected applications, including acc.tixo Invoice PDF for ChatGPT (together, the "Service").

2. Information We Collect

2.1 Account Information

• Email address
• Name and business details
• Contact information

2.2 Financial Data

• Transaction records
• Bank account information (encrypted)
• Invoice and payment data
• Tax-related information

2.3 Usage Data

• IP address and browser information
• Pages visited and features used
• Time and date of access
• Device and operating system information

2.4 ChatGPT Invoice PDF Data

When you use acc.tixo Invoice PDF, we receive the structured invoice fields that ChatGPT sends to the app. Depending on what you provide, those fields may include:

• Seller and customer names, postal addresses, email addresses, and phone numbers
• Invoice numbers, dates, currencies, line items, quantities, prices, discounts, taxes, notes, and payment terms
• Tax identifiers and payment details such as a bank name, account number, IBAN, SWIFT/BIC, or payment reference
• Technical request metadata, a pseudonymous quota identifier, allowance usage, error codes, and security events

We receive the tool input needed to generate the PDF; we do not need your entire ChatGPT conversation. Do not include information that is unnecessary for the invoice.

3. How We Use Your Information

We use your information for the following purposes:

• To provide and maintain the Service
• To process transactions and generate reports
• To communicate with you about your account
• To improve and optimize the Service
• To comply with legal and regulatory requirements
• To prevent fraud and ensure security

4. Data Storage and Security

4.1 Security Measures

• All data is encrypted in transit (TLS/SSL)
• Sensitive financial data is encrypted at rest
• Multi-factor authentication available
• Regular security audits and updates
• Access controls and audit logs

4.2 Data Location

Different parts of the Service use different infrastructure providers. Cloudflare provides network delivery, MCP Portal and Access services, serverless compute, quota state, and temporary file storage for the ChatGPT Invoice PDF flow. Other acc.tixo product features may use Google Cloud Platform and Firebase. Data may be processed in the regions used by those providers, subject to appropriate contractual and technical safeguards.

5. Data Sharing and Third Parties

We do not sell your personal data. We may share data with:

• Cloudflare: Network delivery, MCP Portal and Access, serverless compute, security, quota enforcement, and temporary PDF storage
• OpenAI: ChatGPT processes your conversation and exchanges app inputs and outputs under your relationship with OpenAI
• Other Service Providers: Cloud hosting, payment processing, email delivery, and analytics when those services are relevant to the feature you use
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In the event of a merger, acquisition, or sale of assets (you will be notified)
• With Your Consent: For integrations you explicitly enable (e.g., Google Docs, bank connections)

5.1 App Connection and Quota Identity

ChatGPT and Cloudflare may ask you to connect or authenticate the app. You do not need to register a separate acc.tixo account for the guest Invoice PDF flow. To enforce its free allowance and reduce abuse, the Service creates a one-way pseudonymous identifier from the identity presented through the connector access layer. It is not stored as a raw ChatGPT account ID and is not treated as an acc.tixo organisation or accounting-ledger identity.

5.2 PDF Delivery

The generated PDF is returned through a time-limited signed URL. Anyone who has the complete URL may be able to download the PDF until it expires, so protect it as you would protect the invoice itself. We do not intentionally expose internal storage keys to ChatGPT.

5.3 Guest Invoice Retention and Deletion

Structured invoice inputs, the generated PDF, and its signed delivery capability are temporary. The generated PDF is scheduled for deletion within 35 days of creation, and the signed URL expires no later than that deadline. Pseudonymous quota records contain request hashes and allowance counts, not raw invoice fields; they may be retained separately for the active quota period, abuse prevention, or the documented security and backup lifecycle. We do not intentionally place raw invoice content in security or provider logs.

5.4 What the Guest App Does Not Do

The guest app creates and returns a PDF. It does not email or send the invoice, add it to the acc.tixo ledger, issue a fiscal document, collect payment, or mark an invoice as paid.

6. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your data in a portable format
• Restriction: Limit how we process your data
• Objection: Object to certain types of data processing

To exercise these rights, contact us at privacy@tixo.digital

7. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and keep you logged in
• Remember your preferences
• Analyze usage patterns (aggregate data only)

You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. After account deletion:

• Most data is deleted within 30 days
• Some data may be retained for legal/tax purposes (up to 7 years as required by Serbian law)
• Backup copies are deleted within 90 days

The guest ChatGPT Invoice PDF lifecycle is shorter: its generated PDF and signed delivery capability are scheduled for deletion within 35 days, while minimal pseudonymous quota records follow the limited lifecycle described in Section 5.3.

9. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

10. International Data Transfers

If you access the Service from outside Serbia/EU, your data may be transferred to and processed in regions where data protection laws may differ. We ensure appropriate safeguards are in place to protect your data.

11. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. The "Last updated" date at the bottom of this page indicates when the policy was last revised.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices: