Privacy policy
The short version
The invoices you create never reach our servers. They are built inside your own browser and stored on your device. We cannot read them, and we could not hand them over if we were asked to.
Who is responsible
We have not appointed a data protection officer, because the scale of our processing does not require one under Article 37 of the GDPR.
What stays on your own device
When you use the invoice generator, the following is saved in your browser’s local storage:
- Your business details — name, address, business ID, VAT number, IBAN, BIC, phone, email
- Customers you have saved
- Your invoice counter and your language settings
This never leaves your device. We do not receive it, we cannot see it, and it is not backed up anywhere. Clearing your browsing data deletes it permanently, so use the export function if you want to keep a copy or move to another device.
What we actually collect
Very little, and none of it identifies you:
- A count of invoices generated. When you create an invoice, we record that one was created, along with the interface language and the invoice language. No names, amounts, account numbers or any invoice content are included
- Standard server logs. IP address, browser type, pages requested and timestamps, as any web server records. Kept for 30 days, then deleted
- Usage statistics collected without cookies and without tracking you across other websites
Legal basis
We process server logs and usage counts on the basis of our legitimate interest under Article 6(1)(f) of the GDPR — keeping the service secure and understanding whether it is useful. We have weighed this against your interests and consider the impact minimal, since the data does not identify you.
If you sign up for our guide by email, that is processed on the basis of your consent under Article 6(1)(a). You can withdraw it at any time using the unsubscribe link in any message.
The company lookup
When you search for a customer by name, the text you type is sent to the open data service of the Finnish Patent and Registration Office (PRH) so it can return matching companies. Nothing else about you is sent with it. This is public register data, and PRH processes it under its own terms.
Who else sees anything
We do not sell, rent or share personal data. A small number of service providers process data on our behalf, strictly on our instructions:
- Our web hosting provider, which stores the server logs described above
- Our email provider, if you have subscribed to the guide
Where a provider operates outside the EU or EEA, transfers are covered by the European Commission’s Standard Contractual Clauses.
Your rights
Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to processing, and to receive it in a portable format.
In practice, most of these are answered in a sentence, because we hold almost nothing about you. The information that matters is on your own device, where you already control it completely. Write to privacy@laskumaker.fi and you will hear back within 30 days.
If you are not satisfied with how we have handled your request, you can lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi).
Changes
If we change this policy we will update the date at the top. Material changes — for example if we introduce user accounts — will be announced clearly on the site before they take effect.