Privacy Policy

Who we are

Temel is a construction billing application for contractors and subcontractors, available at temelapp.com and app.temelapp.com. The service is operated by Temel, a sole trader established in North Macedonia.

For any question about this policy or about your data, write to stefean.lazarovski@temelapp.com. We answer data-protection requests within 30 days.

Data we collect

We collect only what the service needs in order to work:

• Account data — your name, email address and a hashed password. We never store your password in readable form.
• Company profile — company name, address, tax number (ЕДБ), registration number, bank accounts, manager and authorised person, and any logo or signature image you upload. This data is printed on the invoices you issue.
• e-Faktura credentials — if you enable the УЈП e-Faktura integration, your eУЈП ID, certificate and its private key. The private key is stored encrypted (AES-256-GCM) and is used only to sign the documents you send to the tax authority.
• Business records you enter — clients, contracts, contract items, daily logs, construction books, invoices, and any documents or spreadsheets you upload. These may contain personal data about your own clients and staff.
• Billing data — your subscription plan and status. Card details are handled entirely by LemonSqueezy and never reach our servers.
• Technical data — IP address, browser type, and server logs generated when you use the application, kept for security and troubleshooting.

Cookies

The application sets a session cookie so you stay signed in, and a cookie remembering your language choice. These are strictly necessary for the service to function; we do not use advertising or cross-site tracking cookies.

Why we process it, and on what legal basis

• To provide the service and perform our contract with you — account, contracts, logs, books, invoices and exports (Art. 6(1)(b) GDPR).
• To take payment and manage your subscription (Art. 6(1)(b)).
• To keep the service secure, prevent abuse, and diagnose faults (Art. 6(1)(f), our legitimate interest).
• To meet legal obligations, including bookkeeping and tax rules (Art. 6(1)(c)).
• To send you service and support messages you have asked for. We do not send marketing email without your consent (Art. 6(1)(a)).

Data about your clients and staff

When you enter a client, a worker or a daily-log entry, you decide what is recorded and why — in data-protection terms you are the controller of that data, and we process it on your behalf as a processor, only on your instructions and only to run the service. You are responsible for having a lawful basis to enter it and for informing the people concerned.

Who we share data with

We do not sell personal data and we do not share it for advertising. We use a small number of processors, each only for the purpose listed:

• Vercel Inc. — hosting of the website and application, and storage of the files you upload.
• Our database provider — managed hosting of the application database.
• LemonSqueezy LLC — merchant of record for subscriptions; it processes your payment and billing details under its own privacy policy.
• OpenAI, L.L.C. — only when you use the AI import feature. The contract-item file you upload is sent for extraction and is not used to train models. If you would rather not use it, simply enter items manually.
• Public Revenue Office (УЈП), North Macedonia — only when you send an invoice through the e-Faktura system, as required by Macedonian tax law.
• Professional advisers or authorities, where we are legally required to disclose.

International transfers

Some of the providers above are established outside North Macedonia and the EEA, including in the United States. Where data leaves the EEA we rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard offered by the provider.

How long we keep it

• Your account and business records: for as long as your account is open.
• After you close your account: deleted within 90 days, except where we must keep invoices and billing records to satisfy tax and accounting law.
• Server and security logs: up to 12 months.
• Files sent for AI extraction: not retained by us once the items are returned.

You can export your invoices, logs and construction books at any time before closing the account.

Security

All traffic runs over TLS. Passwords are stored hashed, and e-Faktura private keys are encrypted at rest. Access to production data is limited to the operator. No system is perfectly secure, but if a breach affects your data we will notify you and the supervisory authority as the law requires.

Your rights

You may ask us to give you a copy of your data, correct it, delete it, restrict or object to its processing, or provide it in a portable format. Where processing rests on consent, you may withdraw that consent at any time.

Write to stefean.lazarovski@temelapp.com to exercise any of these. If you believe we have handled your data improperly you may complain to the Personal Data Protection Agency of North Macedonia (Агенција за заштита на личните податоци, dzlp.mk), or to the supervisory authority in your country of residence.

Children

Temel is a business tool and is not directed at children. We do not knowingly collect data from anyone under 16.

Changes to this policy

If we change this policy we will update the date at the top of this page, and for significant changes we will notify account holders by email before the change takes effect.