Privacy policy
Who we are
Kvitlo (kvitlo.com) is a tool for accountants that reads their clients' receipts and invoices and prepares an import file for their accounting program. The controller is the operator of Kvitlo; write to info@kvitlo.com.
What data we process
- Account data: e-mail, the name you choose, your accounting program, sign-in codes and sessions.
- Client data: client names, registration and VAT numbers and phone numbers that the accountant enters.
- Documents: images and PDFs of receipts and invoices sent by the accountant or their clients (from a computer, by Telegram or WhatsApp, by e-mail or through a personal link), and the data read from them: supplier, date, amounts, VAT.
- Technical data: server logs with time and IP address, for security.
Why, and on what basis
Data is processed to provide the service: to read documents and prepare the import file. The basis is the contract with the accountant. Client and supplier data in documents is processed on the accountant's instructions, as a processor. The accountant is responsible for having the right to process these documents.
Automated reading
Document images are sent to an automated reading service that returns structured data. What was read is shown to the accountant to check; nothing is posted without their approval. Under its contract terms, the service provider does not use the content to train its models.
Where data is kept
The server is in a data centre in Riga, Latvia, under European Union jurisdiction. The connection is encrypted. Backups are made every day. To be read, a document image is also sent to the automated reading service, which may be located outside Latvia (see above).
How long
Documents and the data read from them are kept while the account exists, because accounting documents have a retention period set by law. The account and its data can be deleted at the accountant's request. Sign-in codes are deleted after 10 minutes.
Who receives data
The hosting provider (a data centre in Latvia), the e-mail service that sends sign-in codes, the document reading service, the payment processor Stripe (account e-mail, name and invoice amounts; no documents), and Telegram or WhatsApp as a channel, if the accountant uses them. We do not sell data and do not use it for advertising.
Your rights
You have the right to access your data, correct it, delete it, restrict its processing, and complain to the Latvian Data State Inspectorate (Datu valsts inspekcija). Write to info@kvitlo.com.
Cookies
We use a single technical cookie to keep you signed in. There are no tracking or advertising cookies.