Privacy policy

Gonibabki, based in the Netherlands, is responsible for your account data. For the data about your clients and contacts that you enter, you are responsible and we process it on your behalf.

• Your account: your name, email address and profile picture, from Google when you sign in.
• Your company: the details you enter for your invoices, such as address, KvK, BTW number, IBAN and logo.
• Your work: clients, contacts, projects, hours, expenses, receipts, invoices and their PDFs.
• Emails you send: the recipients, subject, message and PDF of invoices you send.

When you send an invoice, gonibabki hands the email to Resend, which delivers it and tells us whether it arrived. Invoices go out as “your company via gonibabki”, and replies go to your own address. We use your clients’ addresses for nothing else.

We use your data to run gonibabki for you, under our agreement with you; to keep the service secure, as a legitimate interest; and to keep our own financial records, as the law requires. We do not sell your data or use it for advertising.

Your data is stored in the EU. These services process it on our behalf, under data processing agreements:

We use only the cookies needed to keep you signed in. No analytics, no advertising, no tracking across sites.

We keep your data while your account exists, and for 30 days after it ends so you can export it. Remember that Dutch law asks you to keep your own invoices for seven years: export them before you leave.

Under the GDPR (AVG) you can ask to see, correct, export or delete your data, and object to how we use it. Ask us at the address below and we handle it within 30 days, deletion included. You can also complain to the Autoriteit Persoonsgegevens.

Connections are encrypted, and access to data is limited to what running the service needs.

If we change this policy in a way that matters, we tell you before it applies.

Questions or requests: hello@gonibabki.com.