Privacy Policy

Last updated: January 2026

1. Introduction

TallyFlow ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at tallyflow.gabrieleserpi.com.

This service is operated by Gabriele Serpi. For any privacy-related questions, contact us at: gabriele@gabrieleserpi.com

2. Information We Collect

2.1 Personal Data

We collect the following personal information when you register:

  • Email address
  • Company/Name
  • Password (encrypted)
  • Payment information (processed by Stripe)

2.2 Technical Data

We automatically collect:

  • IP address
  • Browser type and version
  • Device information
  • Usage data and access times

2.3 Cookies

We use essential cookies for:

  • Authentication and session management
  • Remembering your preferences
  • Security purposes

3. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

  • Contract: To provide our service to you
  • Legitimate Interest: To improve our service and prevent fraud
  • Consent: For marketing communications (if opted in)
  • Legal Obligation: To comply with applicable laws

4. How We Use Your Information

We use your information to:

  • Provide and maintain our service
  • Process your subscription and payments
  • Send service-related communications
  • Provide customer support
  • Detect and prevent fraud
  • Improve our service

5. Data Sharing

We share your data only with:

  • Stripe: For payment processing
  • Email service providers: For transactional emails
  • Law enforcement: When required by law

We do not sell your personal data to third parties.

6. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Limit how we use your data
  • Portability: Receive your data in a portable format
  • Object: Object to certain processing activities
  • Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at gabriele@gabrieleserpi.com

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for legal compliance for up to 7 years.

8. Data Security

We implement appropriate security measures including:

  • SSL/TLS encryption for data in transit
  • Encrypted password storage (bcrypt)
  • Secure hosting infrastructure
  • Regular security updates

9. International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place for such transfers.

10. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

For any questions about this Privacy Policy or to exercise your rights, contact:

Gabriele Serpi
Email: gabriele@gabrieleserpi.com
Website: www.gabrieleserpi.com

← Back to Home