Privacy Policy

This Privacy Policy explains how ITHitec ("we") collects, uses, and protects your personal data when you use our website and services.

Information we collect

• Account data: name, email, password (hashed) — when you register or sign in with Google
• Order/payment data: order details, bank transfer slips (if paying by bank transfer/PromptPay) — we never store your card number; card payments are processed directly by Stripe/PayPal
• License usage data: license key, machine ID of activated devices, validation timestamps
• Technical data: IP address, browser type — used for security and abuse prevention
• Content sent through AI features (if enabled): messages sent to external AI providers to process your request

How we use your data

• To provide, issue, and validate your License
• To process orders and notify you of payment status
• To communicate about your account or technical support
• To prevent fraud and abuse
• To improve the quality of our services

Sharing with third parties

We share data only as necessary with relevant service providers: payment processors (Stripe, PayPal) and external AI providers (only when you use a product's AI feature). We do not sell your personal data to third parties for marketing purposes.

Chrome extension: Marketplace Invoice

This section applies to the Marketplace Invoice extension (receipts and tax invoices from Shopee, Lazada and TikTok Shop), on both the Free and the paid plans.

Data sent to, processed and stored on our servers (invoice-api.ithitec.com)

• Shop / issuer details you set up: name, tax ID, branch, address, phone, email, website, logo, stamp and signature images, and document defaults
• Document data you create: the buyer's name, address, phone and tax ID, items, prices, amounts, order number and date, payment method and notes — including order data the extension reads from the order detail page you have open in the Shopee, Lazada or TikTok Shop seller center
• Technical identifiers: a random installation ID (Free plan) or the account tied to your License (paid plans), document numbers, verification codes, and IP addresses stored only as one-way hashes to limit overuse and prevent abuse. Our hosting provider may also keep ordinary server access logs

Purposes: calculating totals and tax, producing and issuing documents, assigning sequential document numbers, issuing verification codes, enforcing plan quotas, and keeping your shop details available to you. We do not use this data for advertising and we do not sell or transfer it to third parties beyond what is needed to provide the service.

Sending documents by e-mail (paid plans only): when you send a document to a customer by e-mail, the server receives the recipient's e-mail address and the message you type, and uses them only to send the document through our mail system on behalf of your shop. We do not store the recipient's e-mail address; we keep only a one-way hash and the time of sending to limit the number of sends and prevent abuse. As the sender you must have a legal basis for sending the document to that recipient.

Document previews while you edit are sent for rendering only and are not stored. Only documents you choose to issue are stored.

Buyers' data: buyer details you put on a document are personal data of third parties. As the issuer you are responsible for informing the buyer and for having a legal basis to use that data. We process it only on your instruction in order to produce the document.

Document verification page: recipients can check a verification code. It shows only the document number, issue date and plan type — never buyer, seller or amount details.

Retention and deletion: we keep this data while you use the service. You can ask us to delete the shop details and documents we hold by contacting us. Note that the Free plan is tied to that Chrome installation; a reinstall creates a new account and we may be unable to identify your earlier data to restore or delete it. Paid plans are tied to your License.

Security: all data is sent over HTTPS, access to paid-plan data requires a device token tied to your License, and requests are rate limited to prevent abuse.

Cookies

Our site uses cookies necessary for operation, such as keeping you signed in (session) and remembering your language choice. We do not use cookies for cross-site advertising tracking.

Your rights

You may request access to, correction of, or deletion of your personal data by contacting us through the channels below. After account deletion, some License/order records may be retained as required by law (e.g. accounting records).

Security

We protect your data with appropriate technical measures, including password hashing, encryption of sensitive data, and access restrictions.

Changes to this policy

We may update this policy from time to time. Changes take effect as soon as they are published on this page.

Contact us

If you have questions about this Privacy Policy, please contact us through the channels listed on our "Contact" page.