Data protection
What data this platform collects, why it keeps it, who sees it and how long it stays.
1. Who holds this data
The data controller is AT PARTNERS LLC. For any question about this notice, write to info@centpercent.eu.
2. What is collected
Only what the accounting work and the security of your account require. Nothing is collected for advertising and nothing is sold to third parties.
- Account — your username, email, phone if you give one, your role and the access the office assigns you.
- Sign-ins — the date and time of every sign-in attempt, successful or not, the IP address, a description of the device and browser, and how the session ended. The password is never stored, not even when typed wrongly.
- Location — only when the office has set a sign-in zone for an account, and only the coordinates the browser itself gives at the moment of signing in, after you have allowed it. There is no continuous tracking and no movement is recorded.
- Business data — the entity name, business ID, VAT number, invoices, filings, receipts, debts and the payroll with its contributions.
- Documents — every file uploaded to the entity's folder, together with the text extracted from it so that search can find it inside the page too.
- Communication — the messages between you and the office, voice notes and call records inside the program.
- Announcements — if you allow notifications, the subscription linking your browser to your account is stored. It is removed as soon as you turn them off.
3. Why it is kept
- To perform the service — keeping the books, preparing the filings and communicating with you are the contract itself.
- For a legal obligation — accounting and tax documents must be kept for as long as the law requires, even after the relationship ends.
- For the security of your account — the sign-in log and the audit trail exist so the question «who changed this, and when» can be answered.
4. Who sees it
Access is granted by role and checked on every page, not only in the menu. A client sees their own file and nothing else; a worker sees what has been assigned to them; an administrator sees the whole. Every look at sensitive data and every change is recorded with the name of whoever made it.
Outside the office, data goes only where the work itself requires — to the tax administration for the filings you order — or where the law requires. There is no advertising, no tracker, and no third-party analytics runs on this site.
Having a document read by an external model is a feature that is off by default. When the office turns it on, it acts on a single document and only after someone presses the button — never in bulk and never on its own.
5. Where it is kept and how it is protected
- The database sits on the office server and is encrypted on disk: a copy taken off the machine cannot be read without the password.
- The connection to the site runs only over HTTPS, and the site loads nothing from outside servers.
- Sign-in can be protected with two-step verification or a passkey; the account locks itself after a set number of failed attempts.
- The audit trail is linked into a chain that cannot be rewritten: a record removed later shows up as a gap, not as something that never existed.
- Backups are taken regularly and kept limited in number; if the office has set a second storage location, the copy goes there too.
6. How long it is kept
Business data and documents are kept for as long as the relationship lasts and then for as long as the legal retention period for accounting documents requires. Non-critical audit records are cleared by the office after a set period; deletions and anything touching money, clients or accounts remain. When an account is closed, its personal data is removed or anonymised except what must be kept by law.
7. Your rights
Over your personal data you have the right:
- to see it and receive a copy;
- to ask for correction of anything inaccurate;
- to ask for erasure, where no legal retention obligation prevents it;
- to ask for processing to be restricted, or to object to it;
- to complain to the competent personal data protection authority.
Most of these you exercise by writing to the office; we answer within the legal deadline.
8. Cookies
This site uses only technical cookies: the one that keeps your session open and the one that remembers your display choices — language, sidebar width, table density. There are no advertising cookies and no cookie is read by a third party.
9. Changes
When this notice changes, the date above changes with it. Changes that affect how your data is processed are also announced inside the program.