Privacy policy

Enquiry processing terms. Effective from 12 October 2026.

Orders and tax return review

When a tax return is submitted for review with separate client consent, an encrypted copy of the questionnaire and calculation is saved. The provider reviews it in a private panel protected by two-factor authentication, requests clarification or prepares final files. The order copy is stored separately from the guest draft; deleting the draft does not cancel an order already submitted for review.

Order and file retention, days: 30. Access ends and temporary data is deleted when the period expires. Download your copy before then.

Access without registration uses a necessary guest cookie with HttpOnly, Secure and SameSite=Lax. Opening an order on another device may require a one-time email code. Secret codes, questionnaire data and document contents are not included in URLs.

When payments are connected, Stripe handles payment details on its own page. The site sends the order number, service name and amount; tax return contents, rodné číslo and document contents are not sent to Stripe. Resend is used for notifications and access codes. Provider acceptance does not guarantee inbox delivery. Details: Stripe Privacy and Resend Privacy.

The generator stores your email with the order to provide the purchased PDF and restore access. This address is passed to Stripe to prefill checkout and to Resend to send a secure link and access codes. The PDF content is not included in the email. Your email is not added to the document and is not used for advertising.

Business registration applications

A separate secure form lets you submit details of the entrepreneur, founders and director, address and activity information, copies of necessary identity documents and other evidence. Select only documents relevant to your circumstances. Do not provide passwords or third-party data without a valid basis.

Attachments are checked by local ClamAV and file-structure validation; image metadata is removed. They are encrypted on the VPS, accessible only to the provider through two-factor login, and are not sent to external AI services or as email attachments. Unsubmitted attachments are deleted after 24 hours; submitted files follow the order retention period. Backups follow their own retention policy.

Purpose of processing

The service provider listed above processes data to respond to your enquiry, provide a consultation and agree on a service. Consent in the form covers handling your enquiry, not marketing emails. We cannot respond without the necessary contact information.

Request data

Name, email or phone number, selected service, consultation topic and format, translation language pair and question description. Do not send passport details, medical information, tax returns or other documents through the general enquiry form. Attachment uploads are unavailable.

Storage and protection

Requests are stored encrypted on the Hetzner VPS with restricted access. Request content is not logged or accessible through a public link.

Request retention on the server, days: 30. After this period, the record and notification queue entry are automatically deleted.

Provider dashboard and backups

The provider manages enquiries in a private dashboard with two-factor login. Status and internal notes are stored with the enquiry. Email-delivery receipts retain technical status without copying the full provider event.

Data and configuration backups are encrypted with a separate key. VPS copies are kept for up to 14 days; a restoration-test copy is held on the provider’s protected computer. Original deletion deadlines remain after restoration. Deletion requests also account for backup and email copies.

Request notifications

Resend (Plus Five Five, Inc.) and the Google Gmail mailbox deliver enquiries to the service provider. They receive your contact details and enquiry content. The recipient is the service provider’s contact email listed above. This handler does not send tax questionnaires or document files.

Email providers may process data outside the EEA, including in the USA. The Resend sending region is Ireland; this does not mean all data is stored exclusively in the EU. The providers’ documents describe their terms and international transfer mechanisms.

Resend Privacy Policy · Resend Data Processing Addendum · Google Privacy Policy

Deleting a request from the server does not delete email copies in Gmail and Resend. Their retention depends on the service provider’s handling of the enquiry and the providers’ terms. To request deletion, including email copies, contact the service provider’s email.

Your rights

You may request access, correction, deletion, restriction of processing and data portability, and withdraw consent. Withdrawal does not affect the lawfulness of earlier processing. Contact the service provider’s email; identity verification may be needed to protect your data. You may also contact the Czech supervisory authority, Úřad pro ochranu osobních údajů.

Úřad pro ochranu osobních údajů · GDPR

Document generator

Data is sent to the server to validate and create the preview, processed in memory and not saved. Sensitive data is not included in URLs.

OSVČ tax questionnaire

The questionnaire and control PDFs are stored encrypted. A guest cookie protects access. They are not sent by email, to external AI/OCR or authorities. Deleting the draft also deletes its files.

Draft retention: 24 hours.

Control kit recovery

With separate consent, an encrypted copy of the tax questionnaire, calculations and control PDFs can be saved for recovery with a secret code. Retention, hours:

168.

Without this consent, no recovery copy is created. The code is not stored in plaintext on the server or sent by email. Anyone with the code can restore the kit, so keep it private. Changing the questionnaire or deleting the draft revokes the code and associated restored sessions. After expiry, the copy is deleted during scheduled cleanup.

Cookies and external services

There are no accounts, analytics cookies or advertising trackers. The form uses a temporary security token to prevent duplicate submissions and spam. Fonts and photos are served by this website. Enquiry content is not sent to external AI/OCR services.