Privacy policy

Version of 1 November 2026.

This policy explains what personal data Faktar processes, why, for how long, and what your rights are, in accordance with Organic Law No. 2004-63 of 27 July 2004 on the protection of personal data.

Who is responsible for your data

• For your account and the use of the service (name, email, sign-ins, messages to the Faktar team): Glint Solutions (SUARL, Sfax), publisher of Faktar, is the controller.
• For the data of your business (your customers, suppliers, documents, payments): your company is responsible for it. Faktar processes it only on your behalf, to provide the service, and uses it for no other purpose.

Data processed

• Account: name, business email, password (stored encrypted, never readable), role, date of last sign-in, version and date of acceptance of the terms.
• Company: company name, address, tax ID, bank details and logo, if you enter them.
• Business: customers, suppliers, items, commercial documents, payments, expenses, stock, that you enter.
• Technical: device identifier (for synchronization and device-bound licences), synchronization dates, security logs.
• Support: messages exchanged with the Faktar team, and the details of an error when you choose to send them to us.
• Your company's mailbox, if you set it up: the sending server's address and username, the password (stored encrypted, never shown again), and the history of emails sent from Faktar (recipient, subject, text, any attachment, sending status).
• WhatsApp messages: when you open WhatsApp from Faktar, we keep a record of the message (recipient, number, text, author, date). The sending itself is done from your own WhatsApp, which Faktar does not read.
• Documents shared by link: the PDF of a document sent with a download link, how many times it was opened and when it was last opened.

Requests sent from the faktar.tn website (demo, quote, question): name, company, phone, email, city, business and message, that you enter. They are used only to contact you back and follow up on your request: they are not sold, shared or used for any other purpose. You may ask for them to be deleted at any time (see "Your rights"). The website uses no cookies or trackers.

Faktar collects no data for advertising purposes, uses no advertising trackers and sells no data.

Why

• to provide the service: create and synchronize your documents, manage your access and your subscription;
• to ensure security: authentication, prevention of fraudulent access, backups;
• to assist you: answer your messages;
• to send, at your request, your emails, automatic reminders and documents to your customers and suppliers;
• to meet our legal obligations, in particular accounting and tax obligations.

Where your data is

• On our servers, in Tunisia: they are hosted by Oxahost in a datacenter located in Tunis, with restricted access. Your data is not transferred outside Tunisia by Faktar.
• What you send to your contacts goes through the services you choose: your mailbox (Gmail, Outlook…) for emails, your WhatsApp for messages. These services, which your company uses under its own terms, may be located outside Tunisia.
• A document shared by link can be opened by anyone who has the link, without an account, for 30 days or until you disable it. Only forward the link to its recipient.
• On your devices: Faktar works offline. A copy of your data is stored on each device signed in to your account. Your session is protected by the system's secure keychain. You are responsible for the security of your devices.

Who has access

• the users of your company, according to the rights you give them;
• the Faktar team, only when necessary for support, security or maintenance;
• our host, Oxahost (datacenter in Tunis), solely to provide hosting;
• the authorities, only upon a legal request.

How long

• Account and business data: for the entire duration of the subscription. After termination, the data can be recovered for 90 days, then it is deleted, unless the law requires it to be kept.
• Commercial and accounting documents: according to the legal retention periods applicable to your company (in principle ten years). This retention is your responsibility: ask us for a copy of your data before it is deleted.
• Security logs: 12 months.
• Documents shared by link: the PDF is deleted no later than one week after the link expires (30 days), or as soon as it is disabled. The history of links stays with the account.
• History of emails and WhatsApp messages: as long as the account exists.
• Messages to support: as long as the account exists.
• Requests sent from the website: kept to contact you back, until you ask for them to be deleted.

Security

Encrypted connections, encrypted passwords, separate access between companies, rights per user, regular backups. As no system is infallible, we will inform you without delay of any data breach concerning you.

Your rights

You have a right of access, rectification and objection regarding your personal data, under the conditions of Organic Law No. 2004-63. To exercise them: contact@glint-solutions.tn, or the "Contact Faktar" menu. We answer within one month.

For the data of your own customers and suppliers, it is up to your company to answer their requests. Faktar helps you on simple request.

You may also contact the INPDP (www.inpdp.tn).

Changes

Any change to this policy is dated. If it changes your rights, it will be shown to you the next time you open the application, for acceptance.