Privacy Policy
Last updated: April 2026
This Privacy Policy describes how EasyInvoiceBot ("we", "our", "the service") collects, processes, and stores your data.
1. Data Controller
The service is operated by Timofei Shabalin, an individual. For privacy-related inquiries, contact: support@easyinvoicebot.com
2. Data We Collect
We may store and process the following information:
- Your Telegram user ID and basic account information provided by Telegram
- Client information you enter (such as client name, address, tax/VAT number, and contact details)
- Invoice data, including items, prices, tax rates, and totals
- PDF files generated by the bot, where applicable
We do not intentionally collect any data that we do not need for providing and improving the service.
3. Legal Basis for Processing
We process your data on the basis of contract performance (GDPR Art. 6(1)(b)) — to provide the invoicing service you requested. Where we store financial data beyond the duration of active use, we may rely on a legal obligation (Art. 6(1)(c)) to the extent required by applicable law.
4. Purpose of Data Processing
We process your data in order to:
- Generate invoices and related PDF files
- Store and provide access to your invoice history
- Maintain and improve the functionality of the bot
- Provide user support when requested
5. Data Sharing and Third Parties
We do not sell your data or share it for advertising purposes.
Your data may be processed by the following third parties as part of providing the service:
- Telegram — the platform through which the bot operates. Your use of the bot is subject to Telegram's own Privacy Policy.
- Paddle — our payment processor. If you purchase a Pro subscription, your payment data is processed by Paddle.com Market Limited, acting as Merchant of Record. Paddle's Privacy Policy governs their processing of your payment information.
- Infrastructure providers — hosting and cloud services located in Germany (EU), used solely for operating the service.
6. Data Retention
We retain your data for as long as it is necessary to provide the service or as required by applicable law. You may request deletion of your data as described below.
7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data
- Restriction — request that we limit how we use your data
- Portability — request your data in a machine-readable format
- Objection — object to certain types of processing
To exercise any of these rights, contact us at support@easyinvoicebot.com. We will respond within 30 days.
8. Data Deletion
You can request full deletion of your account data and related invoice information by contacting our support. After verifying your request, we will delete your data within 30 days, unless we are legally required to retain certain records.
9. Supervisory Authority
If you believe your data is being processed unlawfully, you have the right to lodge a complaint with a data protection supervisory authority. As our infrastructure is located in Germany, the relevant authority is the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (bfdi.bund.de). You may also contact the supervisory authority in your country of residence.
10. Security
We use reasonable technical and organizational measures to protect your data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page. Continued use of the service after changes means you accept the updated policy.
12. Contact
If you have any questions about this Privacy Policy, contact us at: support@easyinvoicebot.com