Privacy Policy

Faktourist is an invoicing, VAT and tourist-registration workspace for Bulgarian businesses. This policy explains what personal data we process when you use the application at faktourist.com, and what your rights are.

For privacy questions or requests, contact us at privacy@faktourist.com.

• Account data, name, email address and authentication details used to sign you in.
• Company data, company or personal legal name, EIK/BULSTAT/EGN, VAT status and number, address, IBAN and bank name, contact details, and team membership.
• Business records you enter or import, clients, products, invoices, proformas and credit notes, payments, platform commission statements and reservation data from Booking.com or Airbnb.
• Guest data for ESTI, guest names, identity document details, dates of birth, nationality and stay dates that you enter or collect in order to meet Bulgarian tourist-registration obligations.
• Billing data, subscription plan and status. Card payments are handled by our payment processor; we never receive or store full card numbers.
• Technical data, log and error information generated when the application runs, used to keep the service secure and working.

To provide the service you signed up for (contract), to comply with our own legal obligations, and, for security, abuse prevention and product reliability, on the basis of our legitimate interests. Where you upload data about your clients and guests, you act as the data controller and Faktourist acts as your processor, handling that data only on your instructions.

We do not sell personal data. We share it only with service providers that operate the platform on our behalf, hosting and database infrastructure, email delivery and payment processing, and with authorities when the law requires it. Files you generate for the NRA or ESTI are produced for you; you decide when and how to submit them.

We keep your account and business records for as long as your account is active. After you close your account we delete or anonymise your data, except where Bulgarian accounting and tax law requires a longer retention period for the underlying documents.

Under the GDPR you can request access to your personal data, correction, erasure, restriction of processing, portability, and you can object to processing based on legitimate interests. Write to privacy@faktourist.com and we will respond within one month. You may also complain to the Bulgarian Commission for Personal Data Protection (CPDP).

Access to your data requires authentication, and records are isolated per company so that only members of your organisation can read them. Data is transmitted over encrypted connections. No system is perfectly secure, if a breach affects your data, we will notify you and the authorities as required by law.

We may update this policy as the product evolves. Material changes will be announced in the application, and the date at the top of this page will change.