Privacy Policy — Timvo

Last updated: [insert date]

These Terms and Conditions (“Terms”) govern access to and use of the Timvo service (the “Service”), a product name and domain Timvo (timvo.be), provided by BCU&CO SRL (the “Provider”, “Timvo”, “we”, “us” or “our”). By creating an account or using the Service you accept and agree to be bound by these Terms.

1. Data Controller

The data controller is BCU&CO SRL, Avenue Louise 209/7, 1050 Brussels, Belgium. Email: [email protected]

2. Categories of Data We Collect

We collect only the data necessary to provide our services securely and lawfully.

• Account information (name, email, company, VAT, billing address...)
• Payment and subscription data (Stripe identifiers, invoices...)
• Application data (invoices, projects, timesheets, documents...)
• Technical and usage data (IP, logs, crash reports...)
• Support and communication data (messages, KYC info...)

3. Purpose and Legal Basis for Processing

We process your data for the following purposes:

• To create and manage your account (Contractual necessity)
• To provide invoicing and project management (Contractual necessity)
• To issue and receive payments (Contractual necessity)
• To perform identity verification (Legal obligation)
• To ensure compliance with accounting and tax laws (Legal obligation)
• To provide customer support (Legitimate interest)
• To send important updates about the Service (Legitimate interest)
• To improve and secure our platform (Legitimate interest)
• To store accounting data for legal retention periods (Legal obligation)

We do not sell or rent user data to third parties.

4. Subprocessors and Data Recipients

We only share your data with trusted subprocessors:

• Stripe (payment processing, EU/Ireland)
• Ademico (Peppol Access Point, EU)
• Hypen (hosting provider, Romania EU)
• AWS/GCP (cloud infrastructure, EU)
• Email & communication providers (EU)

5. Data Retention

Invoices are kept for 10 years; logs up to 6 months; support messages up to 12 months.

6. Data Storage and Security

Your data is stored securely on EU servers with encryption, access control, and backups.

7. International Data Transfers

We do not transfer personal data outside the EEA. If needed, GDPR safeguards will apply.

8. User Rights

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion (where legally possible)
• Restriction: Limit processing in some cases
• Portability: Receive data in machine-readable format
• Objection: Oppose processing for legitimate interest
• Complaint: File with Belgian Data Protection Authority

9. Cookies and Tracking

We use only necessary cookies for authentication. No ads or tracking cookies.

10. Third-Party Links

Our website may link to third-party services; we are not responsible for their practices.

11. Children’s Privacy

Timvo is for professional users. We do not knowingly collect data from under 16s.

12. Updates to This Policy

We may update this policy and notify users at least 15 days before changes take effect.

13. Contact

For privacy inquiries, contact [email protected] (BCU&CO SRL, Avenue Louise 209/7, 1050 Brussels).