Privacy notice
How VýpisFlow handles statements, personal data, cookies and third‑party tools.
Controller
The data controller is Alexander Priadchenko, IČO 22319051, Česká republika. For privacy matters contact us at info@vypisflow.cz.
What we process
Account data (email address via the Clerk sign‑in provider), usage data (number of conversions, credits, plan), payment data on purchase (handled by Stripe) and standard technical data such as IP address, request time and browser type.
Statement and invoice processing
Bank statements and invoices are processed solely in your browser. Their contents are never uploaded or stored. A single result downloads directly, while ZIP is used only for multiple files. Technical logs are not included in downloads.
Office teams and invitations
If you create or join an Office team, we store the team name, an optional team photo, membership and role, and the shared conversion count. Team members see the team name and photo and each other's names, email addresses and profile pictures from Clerk. Membership does not share statement files, drafts, conversion history or financial contents. To invite someone, the team owner enters an email address. We send the invitation through Resend, store the address with the invitation state and dates, and the link stops working after 7 days at the latest. The legal basis is the contract with the team owner and our legitimate interest in delivering the invitation. The team photo is deleted automatically when the team is dissolved. Team and invitation records are kept as a record of access; we delete invitation records on request sent to info@vypisflow.cz. The team owner also sees how many conversions each member used from the shared pool (in the current period and per calendar month) and the date of their last conversion from the pool; people who left the team appear only in one combined total without names.
Cookies and consent
We distinguish necessary, analytics, marketing and preferences cookies. Necessary cookies are always on; the rest activate only after your consent. You can change or withdraw consent anytime via the cookie bar or the “Cookie settings” link in the footer.
Analytics and marketing
With consent we use Google Analytics 4 and Google Tag Manager (analytics) and Google Ads and the Meta (Facebook) Pixel (marketing) for traffic measurement and ad targeting. We apply Google Consent Mode, so these tools do not run without consent.
Processors and transfers
We use the following processors: Cloudflare (hosting and database), Clerk (sign‑in), Stripe (payments), Resend (email delivery), Google (analytics and ads) and Meta (pixel). Some may process data outside the EU under GDPR safeguards such as standard contractual clauses.
Legal basis and retention
Analytics and marketing rely on consent, account operation and payments on contract performance, and security on legitimate interest. We keep data only as long as necessary for the purpose or as required by law.
Your rights and contact
You have the right of access, rectification, erasure, restriction, portability and to withdraw consent, and the right to lodge a complaint with the Czech Data Protection Authority (uoou.cz). Contact: info@vypisflow.cz.
Updated 17 September 2026