Privacy policy

In force from: 25.03.2026

1. Data controller

Tresoor Tarkvara OÜ
Registry code: 10501507
Location: Estonia
Email: info [at] tresoor.ee

2. Our principles

Privacy is a core value of AlfaERP. We do not collect or sell your data. Our website and our software are built with privacy in mind:

• 0 third-party trackers — no Google Analytics, no Facebook Pixel
• 0 cookie pop-ups — we do not use tracking cookies
• Analytics are anonymous — we use Plausible CE (self-hosted, GDPR-compliant)
• Your ERP data never leaves your server — with an on-premise deployment

3. What data we collect

3.1. Visiting the website

When you visit the website we collect only anonymous usage statistics (Plausible CE, self-hosted). No cookies, no personal data, no storing of IP addresses. The one exception is the purchase invoice recognition demo, where the content you upload is sent to our server for processing — see section 3.4.

3.2. Contact form data

If you fill in the contact or interest form, we collect your name, email address, company name (optional) and message. We use this data only to get in touch with you.

3.3. Using the ERP software

Business data entered into the ERP software (invoices, payroll data, customer information and so on) belongs to the user. With an on-premise deployment, Tresoor Tarkvara OÜ has no access to that data.

3.4. Website demo: purchase invoice recognition

In the purchase invoice recognition demo on this website, the content of the invoice you upload — the text extracted from the PDF in your browser, or a picture of the invoice — is sent to our web server and on to AlfaERP's own AI service, where the model reads it. An invoice may contain personal data (names, contact details, IBAN), so only upload invoices whose content may be processed this way. The legal basis is your consent, which you give by uploading the file. Our web server does not store or log the invoice content: the request passes through and only the recognition result comes back, and it stays in your browser. The other demos (sales report, payroll calculator, Excel to sales invoices) run entirely in your browser and send us nothing at all.

4. Legal basis for processing

• Performance of a contract — to provide the ERP service (GDPR art. 6(1)(b))
• Consent — when filling in the contact form (GDPR art. 6(1)(a))
• Legitimate interest — improving the service on the basis of anonymous analytics (GDPR art. 6(1)(f))

5. Sharing of data

We do not share, sell or rent your personal data to third parties. Exceptions:

• A legal obligation (for example a court order)
• Your explicit consent

6. Data retention

We retain contact form data for up to 12 months. ERP data is retained according to the user's settings and the requirements of the Estonian Accounting Act (usually 7 years).

7. Your rights (GDPR)

You have the right to:

• Access your personal data
• Request correction or erasure of your data
• Restrict processing
• Data portability
• Object to processing
• Lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee)

8. Private AI

The AlfaERP AI features (invoice recognition, analytics assistant) run on AlfaERP's own infrastructure on our own GPUs — we do not use third-party cloud AI services (OpenAI, Google or the like). With an on-premise deployment the model used (Qwen3) runs on the customer's own server. For the website demo see section 3.4: there the invoice content is sent to our AI service for processing.

9. Cookies

We do not use tracking cookies. Only technically necessary session identifiers in the ERP service (authentication). These do not require consent (the ePrivacy exemption).

10. Changes

We announce changes to the privacy policy on the website. We inform you by email of material changes.