Privacy Policy
Last updated: May 2026
Last updated: May 2026
1. General
This Privacy Policy describes how paralavi.app (the "Service" or "we") collects, uses, and protects personal data when you use the application, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Greek law.
For any matter relating to your personal data or this Policy, you may contact us at: paralavi.app@gmail.com
2. What data we collect
2.1. Account data. When you request access or create an account, we collect: full name, email address, business name, and any details you provide in the related request.
2.2. Service usage data. Content you upload or create within the Service — invoices, delivery notes, product data, receiving reports. These documents may contain personal data (e.g., supplier details).
2.3. Technical data. For security and error-handling purposes, limited technical data is collected (see section 6).
2.4. We do not collect special categories of data (sensitive data) and we do not carry out automated decision-making producing legal effects concerning you.
3. Purposes and legal bases for processing
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and managing an account | Performance of a contract (Art. 6.1.b) |
| Providing the Service's features | Performance of a contract (Art. 6.1.b) |
| Automated extraction of data from invoices | Performance of a contract (Art. 6.1.b) |
| Security, error detection & correction | Legitimate interest (Art. 6.1.f) |
| Communication regarding the Service | Legitimate interest / Contract |
| Compliance with legal obligations | Legal obligation (Art. 6.1.c) |
4. AI-based invoice processing
4.1. When you upload an invoice or delivery note, the document is processed by an artificial intelligence service for the automated extraction of product and quantity data.
4.2. This processing is necessary for the operation of the Service. Documents may contain personal data of third parties (e.g., supplier details). You are responsible for ensuring you have a lawful right to process the documents you upload.
4.3. Uploaded documents are used solely to provide the Service to you and are not used for any other purpose.
5. Where data is stored
5.1. To operate the Service, we work with reliable cloud infrastructure providers, who act as data processors on our behalf. These cover data storage, user authentication, application hosting, email delivery, error monitoring, and AI-based invoice processing.
5.2. User data is stored on infrastructure with servers located within the European Union. Where certain supporting services may carry out processing outside the EU/EEA, such processing is conducted with appropriate safeguards in place, in accordance with the GDPR.
5.3. Each business-user has access exclusively to its own data. Data isolation is enforced at the database level (Row Level Security). Data transmission is encrypted (HTTPS).
5.4. We do not sell or commercially share your personal data with third parties.
6. Error monitoring
6.1. We use an error-monitoring service to detect and fix technical issues.
6.2. If an error occurs during use, technical details of the error are recorded, along with — in a limited percentage of error cases — a snapshot of your interaction with the screen at the moment of the error. Text input fields are generally masked.
6.3. No recording of your activity takes place when there is no error. This processing is based on our legitimate interest in the security and stability of the Service.
7. Cookies and local storage
The Service uses only strictly necessary cookies. We do not use analytics, advertising, or tracking cookies, nor any third-party tools for traffic analysis. For this reason, no cookie consent banner is displayed — strictly necessary cookies are exempt from the relevant requirement.
7.1. Strictly necessary cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| Authentication cookies | Maintaining your session | Until session expiry |
| Secure sign-in cookie | Secure sign-in process | Temporary |
| Language cookie | Maintaining your language choice (el/en) | Up to 1 year |
7.2. Local storage. The Service stores certain interface preferences locally on your device — for example, whether you have dismissed an informational message, your preferred scanning method, or whether you have completed the initial tour. These items do not contain personal data and are not sent to us.
8. Data retention period
8.1. We retain your data for as long as your account is active. This includes receiving data, invoices, and related documents.
8.2. If the account is deleted, User Data is deleted within 30 days of account deletion, unless retention is required by a legal obligation.
8.3. You may request deletion of your data at any time (see section 9).
9. Your rights
Under the GDPR, you have the right to:
- Access your data
- Rectification of inaccurate data
- Erasure ("right to be forgotten")
- Restriction of processing
- Portability of your data
- Object to processing based on legitimate interest
- Withdraw any consent, without retroactive effect
To exercise your rights, contact us at paralavi.app@gmail.com. We will respond within the time limits set by law (generally within one month).
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
10. Security
We take reasonable technical and organizational measures to protect your data, such as encryption in transit (HTTPS), data isolation per business (Row Level Security), and access control. However, no method of data transmission or storage is completely secure.
11. Children
The Service is intended exclusively for businesses and professionals. It is not directed at minors, and we do not knowingly collect data from minors.
12. Changes to this Policy
We may update this Policy. In case of material changes, we will notify you by email or through the Service. The last-updated date is shown at the top.
13. Contact
For any question regarding this Policy or the processing of your data:
Email: paralavi.app@gmail.com
paralavi.app — Smart goods receiving. From invoice to report, in minutes.