🔒 Our privacy policy now names every outside service we use
The policy used to say we work with 'trusted service providers' without naming any of them. It now lists each one and says exactly what it receives - which is why you were asked to agree again.
You were asked to read and accept our privacy policy again. This is what changed, and why.
We now name the services instead of describing them
The old policy said your information may be shared "with trusted service providers who assist in operating the Service". True, but it told you nothing. There is a new section, Third-Party Services and Data Sources, that names each one and says what it receives.
The Estonian e-Business Register
When you type a company name or registry code into a customer or supplier form, or into an invoice's buyer field, Erpilo offers you matching companies from the Estonian e-Business Register. That means the text you typed is sent there.
The policy now says so, and says what happens to it:
- Nothing identifying you, your company or your session goes with it. Only the text you typed.
- The register's answer is held for up to 24 hours so that the next person searching the same thing does not cost another look-up. It is held under a one-way fingerprint of the search text, with nothing linking it back to you.
- The text you typed is never written into our logs.
- We keep only what you choose to save onto the customer or supplier: the name, the registry code and the registered address.
A sole trader's business name in that register is also a person's name, which is why this is written down rather than treated as a technical detail. The look-up runs only for signed-in users of Estonian companies, and it can be switched off.
The others
- Google Analytics, which we use to see how Erpilo is used. It sets cookies and receives your IP address and the pages you visit. It never receives your name, your email address or any of your business data.
- The font service our pages load their fonts from, which sees your IP address when a page loads.
- Our email delivery provider, which handles the invoices you send, payment reminders, team invitations and news like this one.
- Your own online store, if you connect one. Product, order and customer data moves between Erpilo and that store using the access you set up. That store is yours, not ours.
Nothing about your data changed
No new information is collected, nothing is shared that was not shared before, and nothing is sold - that has not changed and will not. What changed is that the policy now describes what already happens instead of summarising it.
You can read the full policy at any time from the Privacy Policy link at the bottom of every page.