Privacy Policy

1. Controller

The controller for Service-related data is Betacode. For privacy questions, contact privacy@betacode.tech.

2. Data we process

Depending on use of the Service, we may process:

• Stripe account data: account IDs, user/actor names, tokens or API keys needed for OAuth or manual setup.
• InvoiceXpress credentials: account and API tokens provided by the merchant to issue tax documents.
• Customer and invoice data: information synced from Stripe (customers, invoices, tax, statuses) and documents created or managed in InvoiceXpress.
• Service billing data: subscription, trial, payment and billing data processed via Stripe Billing.
• Support requests: messages and metadata associated with tickets opened in the app.
• Technical data: session cookies or local storage, access logs and diagnostics needed for security and operation.

3. Purposes and legal bases

We process data to:

• provide and improve the Service (contract / legitimate interest);
• authenticate accounts, keep sessions and authorize access (contract / security);
• sync invoices and customers between Stripe and InvoiceXpress (contract);
• manage Service subscriptions, trials and payments (contract / legal obligations);
• respond to support requests (contract / legitimate interest);
• comply with legal obligations and security requirements (legal obligation / legitimate interest).

4. Sharing with third parties

Data may be processed by providers needed for the Service, including:

• Stripe — authentication, account billing data and payment of the Service subscription;
• InvoiceXpress — issuing and managing Portuguese tax documents;
• hosting, database and infrastructure providers under appropriate contracts.

We do not sell personal data. Sharing occurs only when needed to provide the Service, by legal obligation, or with your consent when applicable.

5. Retention

We retain data while the account is active and for any additional time needed for legal obligations, dispute resolution, audit and security. Credentials and sync data may be deleted or anonymized after uninstall / deletion request, except where retention is legally required.

6. Security

We apply reasonable technical and organizational measures (access control, encrypted transport, environment segregation and data minimization) to protect information. No transmission or storage method is absolutely secure.

7. Your rights

Under GDPR and applicable law, you may request access, rectification, erasure, restriction, portability or objection, and lodge a complaint with the competent authority (in Portugal, the CNPD). To exercise rights related to the Service, contact privacy@betacode.tech.

Data that lives only in the merchant’s Stripe or InvoiceXpress accounts should be managed directly on those platforms when applicable.

8. Cookies and session

We use cookies or local storage strictly necessary for authentication and session maintenance in the web app. We do not use third-party advertising cookies in the Service.

9. International transfers

Some providers may process data outside the EEA. In that case we seek appropriate safeguards (for example standard contractual clauses) when required by applicable law.

10. Changes

We may update this policy. The date at the top indicates the version in force. Material changes may be communicated through the Service or other reasonable means.

11. Contact

Betacode — betacode.tech
Privacy: privacy@betacode.tech

Back to home