Legal information
Privacy Policy
Effective date: September 1, 2026
This Privacy Policy explains what personal data we collect when you use the nashbuh website and related online features (together, the “Service”), why we use it, and what rights you have.
1. Scope
This Policy applies to website visitors, Service users, and people who contact us about accounting, tax, advisory, or related services. It does not govern data processing by third-party resources that may be linked from the Service.
2. Data we collect
Data you provide
We may receive your name, contact details, company information, message content, documents, and other information you voluntarily provide through the Service or when communicating with us.
Google Account data
If you choose to sign in or connect through Google, we receive only the data and permissions shown to you on the Google consent screen. For standard sign-in, this may include your Google Account identifier, name, email address, and profile image. We do not request additional categories of Google data without first updating this Policy and obtaining any required consent.
Technical data
When you use the Service, servers and security tools may automatically record your IP address, device and browser type, operating system, request time, pages visited, referring address, error logs, and security events. Essential cookies or similar technologies may be used to operate and secure the Service and remember settings.
3. How we use data
We use personal data to:
- provide, maintain, and administer the Service and features you request;
- create and protect your account and perform authentication;
- respond to requests, provide support, and communicate important changes;
- prevent fraud, abuse, unauthorized access, and other security threats;
- analyze performance and improve the Service, primarily using aggregated or de-identified data;
- meet contractual and legal obligations, protect rights, and resolve disputes.
4. Use of Google data
Data received through Google APIs is used only to provide or improve user-facing features that you request and authorize. We limit access to the minimum data needed for the relevant feature.
- we do not sell or transfer Google data to data brokers or information resellers;
- we do not use or transfer Google data for advertising, retargeting, or personalized advertising profiles;
- we do not use Google data to determine creditworthiness or for lending decisions;
- we do not use Google data to create, train, or improve general-purpose machine learning or artificial intelligence models;
- humans do not read Google data unless you give explicit consent for support, access is necessary for security or legal compliance, or the data is aggregated and de-identified for internal operations.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Legal bases
Depending on the circumstances, we process data with your consent, to enter into or perform a contract, to comply with legal obligations, or for legitimate interests such as securing, supporting, and improving the Service, provided those interests are not overridden by your rights and freedoms.
6. Who we share data with
We do not sell personal data. To the extent necessary, data may be received by:
- Amazon Web Services (AWS), for Service hosting, storage, network infrastructure, backups, and security;
- Google, for authentication or other Google features that you expressly connect;
- other providers that process data under our instructions for support, communications, diagnostics, or security;
- public authorities, courts, or other parties where required by law or necessary to protect rights and safety;
- a successor in a reorganization or business transfer, with appropriate safeguards and notice or consent where required by law.
7. International data transfers
Infrastructure providers may process data in other countries. Where this occurs, we use legally recognized mechanisms and contractual, organizational, and technical safeguards designed to protect the data appropriately.
8. Data retention
We retain personal data only as long as necessary for the purposes described in this Policy, considering the duration of our relationship, legal obligations, accounting and tax retention periods, security, and dispute resolution. Google data and access tokens are deleted or de-identified after you disconnect the relevant feature or delete your account, unless longer retention is required by law.
9. Security
We use reasonable technical and organizational measures to protect data, including access controls, secure transmission, monitoring, and backups where appropriate. However, no transmission or storage method can guarantee absolute security.
10. Your rights and choices
Depending on applicable law, you may have the right to:
- receive information about processing and obtain a copy of your data;
- correct inaccurate or incomplete data;
- request deletion where provided by law;
- restrict or object to processing, or receive data in a portable format where applicable;
- withdraw consent for future processing without affecting the lawfulness of earlier processing.
You can also review or revoke the Service’s access on your Google Account security page. To exercise other rights, contact us using the details below.
11. Children’s data
The Service is not intended for people under 18, and we do not knowingly collect their personal data. If you believe a child has provided data to us, please contact us so we can take appropriate action.
12. Changes to this Policy
We may update this Policy. The current version will be published on this page with a new effective date. We will provide appropriate notice of material changes, including new uses of Google data, and obtain fresh consent before such processing where required.
13. Contact
To ask a privacy question or exercise your rights, contact us by phone:
+38 (068) 075-74-42