Scanner Privacy Policy

Last updated 18 October 2026

This Policy explains what data Scanner (scanner.aifa.company) processes, why, where it is stored and what rights you have. The data controller is AIFA Technology FZ LLE. The Policy follows the GDPR standard, with which the Montenegrin Personal Data Protection Act is aligned.

1. What data we process

Account data: email, name, Firebase user identifier, sign-in method (Google or password), time of last sign-in. We do not store passwords — Firebase Authentication (Google) does.

Workspace data: company name, tax ID (PIB), members and their roles, email invitations.

Receipt data obtained from Poreska uprava: receipt identifiers, date, amounts, VAT by rate, line items, seller (name, PIB, address), buyer (name, PIB — if shown on the receipt), payment method; the link from the receipt code; who added the receipt and when. If a receipt names an individual as the buyer, their name and PIB will be part of the receipt data too.

Activity log: who created, deleted or restored a receipt, invited a member, changed a role, made an export or paid for a plan, and when.

Payments: Stripe customer and subscription identifiers, plan, validity period. We never receive or store card details — Stripe handles them.

Technical data: IP address and browser details in Cloudflare logs, used for security and diagnostics.

2. Why and on what basis

To provide the service under our agreement with you (the Terms of Service): keep track of receipts, show summaries, produce exports, manage members and subscriptions.

For our legitimate interests: security, preventing abuse (limits, activity log), improving the service using anonymised usage statistics.

To comply with legal obligations: accounting for payments, responding to lawful requests.

We do not use your data for advertising, do not sell it and do not share it with ad networks. There are no marketing trackers in the service.

3. Who we share it with

Providers processing data on our behalf: Cloudflare (hosting and database, Europe region; request logs), Google Firebase (sign-in, email verification, password reset emails), Stripe (subscription payments), Poreska uprava Crne Gore (receipt data requested by its identifier — no other data is sent to it).

Members of your workspace, according to their role: an employee sees their own receipts, an accountant or administrator sees all receipts in the workspace, the owner sees everything plus settings.

Public authorities — only on a lawful request. In a sale of the business or reorganisation — to the successor, with prior notice to you.

4. Where data is stored

The database and application run on Cloudflare with storage in the Europe region (Eastern Europe). Firebase and Stripe may process data in other countries, including the United States, under their standard contractual terms. The operator is located in the UAE; transfers between these jurisdictions are protected by the providers' contractual safeguards and by encryption in transit and at rest.

5. How long we keep it

Account and workspace data — for as long as the account or workspace exists. Receipts — for as long as the workspace exists; receipts deleted by a user are marked deleted, can be restored by the owner and are erased for good together with the workspace. Activity log — up to 24 months. Database backups — up to 30 days. Payment records — for as long as accounting law requires.

6. Your rights

You may obtain a copy of your data, correct it, delete it, restrict or object to its processing, and port it (CSV and U-RAČ register exports are available in the service). For company data such requests are made by the workspace owner.

Account deletion: write to us from the account's email address — we will delete the data from Scanner and the Firebase account within 30 days, except data we are legally required to keep. Owners delete their workspaces themselves in settings.

Requests go to contact@aifa.company. If you believe we are infringing your rights, you may complain to the data protection authority of your country (in Montenegro: Agencija za zaštitu ličnih podataka i slobodan pristup informacijama).

7. Security

Data is transmitted over HTTPS and stored encrypted by our providers. Administrative functions are available only to Scanner staff through named sign-in; administrator actions are logged. Access within a workspace is governed by the roles assigned by the owner.

8. Cookies and local storage

The service uses only strictly necessary mechanisms: Firebase session data and interface preferences in your browser (selected workspace, filters), plus one cookie that lets us tell a signed-in user from a website visitor. There are no analytics or advertising cookies, so no consent banner is required.

On the pages of our providers that you open yourself — the Google sign-in window and the Stripe payment page — their own cookies apply; those companies control them, see their privacy policies for details.

9. Children

The service is intended for businesses and is not aimed at anyone under 18. If you believe a child has created an account, let us know and we will delete it.

10. Changes to this Policy

We will announce material changes by email or in the service. The date of the latest version is shown at the top of the page.

11. Contact

AIFA Technology FZ LLE, Twin Towers, PO Box 4422, Fujairah, United Arab Emirates. Email: contact@aifa.company.