Last updated: February 9, 2026
We process user account data (username, email, role), authentication metadata (sessions, login security events), and audit logs related to system operations.
Data is processed for invoice workflow management, system administration, legal accountability, and security monitoring.
Data is retained only as needed for legal and operational requirements, and is protected by access controls, audit trails, and security safeguards.
Users may request export and deletion of personal account data through available GDPR controls, subject to legal and operational constraints.