Terms & Policies of Use

iTefteri is an online application that allows the user to record and track financial transactions, such as income, expenses, payments, cash notes and other related data. Access is provided through the central portal app.itefteri.gr and the isolated subdomains corresponding to each store (e.g. to-katastima.itefteri.gr).

The service operates as a tool for recording and organizing data. It is not an accounting system, does not issue tax documents, does not replace an accountant and does not provide tax or investment advice.

Access to the service requires the creation of an account. The user is fully responsible for:

• the accuracy of the details provided at registration,
• keeping their password safe and confidential,
• every action performed through their account.

If unauthorized access is suspected, the user must immediately change their password and notify the Company. The Company is not liable for losses or damages arising from insecure use of passwords or from granting access to third parties.

Each store in iTefteri supports three basic roles:

• Owner: Creates the store, configures its settings, adds and removes users and has full visibility of all entries and transactions.
• Manager: Can record transactions, view their own entries and those made by Staff users in the same store, in accordance with the access settings.
• Staff: Views and records only their own transactions. This is the typical employee role.

The Owner decides who is granted access and with which role. Responsibility for selecting and managing the users connected to their store rests exclusively with the Owner.

The service is provided through subscription plans per store. Prices and available plans are published at itefteri.gr and may be adjusted. Indicatively, there are two categories:

• Basic – includes the core record-keeping features (income, expenses, transactions, subdomain, user roles).
• Pro – includes, beyond the core features, all additional modules that exist or will be added in the future (such as work schedules, cash, cheques, employee payments, statistics, forecasts, etc.).

Subscriptions are valid for a predefined period (e.g. one month, 6 months, one year) and are activated upon payment. Amounts paid are non-refundable, unless otherwise provided by a specific written agreement.

Each new store may use the service for a specific period free of charge (trial period). The trial normally lasts 20 days, unless otherwise stated on the website.

During the trial, the user has access to Basic features. After it expires, in order to continue to have access to the data and use of the service, a subscription must be activated. If no subscription is activated, access may be suspended or terminated automatically.

All data entered by the user into iTefteri (amounts, descriptions, dates, names, notes, etc.) constitute content belonging exclusively to the user.

The Company:

• does not verify whether the data is true or false,
• does not intervene in the nature or quality of the entries,
• bears no responsibility if the data is test data, incorrect or incomplete,
• does not in any way assume the role of auditor or advisor.

Any financial, administrative or other decision made by the user or their business on the basis of the data entered in iTefteri is their own choice and responsibility. The Company bears no liability for any loss, damage or dispute arising from the entries, whether they are correct, incorrect or test data.

The Company strives to keep the service operational and stable. Nevertheless, it cannot guarantee that:

• access will be continuous and uninterrupted,
• there will be no delays or technical errors,
• the service will function identically on every device or browser.

The service is provided "as is". Under no circumstances shall the Company be liable for indirect, special or consequential damages, loss of profits, loss of data or any other damage related to the use or inability to use the service.

Use of the service for unlawful purposes, for attempts to breach systems or access third-party data, as well as for automated data extraction (scraping) without written permission, is prohibited.

The Company may amend these terms. Changes take effect upon their publication on this page.

These terms are governed by Greek Law. The Courts of Thessaloniki have jurisdiction over any dispute.

The service may collect the following:

• Account details Email, password (in encrypted form) and any name or business name provided by the user.
• Entry data Financial transactions, descriptions, notes, dates, amounts and other details the user chooses to enter into iTefteri.
• Technical data Information such as IP address, browser type, essential functional cookies, which support the technical operation of the service.

The data is used exclusively for:

• providing the service and its features,
• technical support and problem resolution,
• improving performance and stability.

The data is not used for advertising purposes and is not sold or transferred to third parties for commercial exploitation.

The data is stored on infrastructure within the European Union with standard technical security measures (e.g. encrypted connections, restricted server access).

The user is responsible for the security of their password. If the password is shared with third parties, the Company cannot prevent its use by them.

The user may request:

• access to the data concerning them,
• correction of details that are inaccurate,
• deletion of data,
• export of data to a file.

To exercise these rights, the user may contact us at info@itefteri.gr.

The Company neither reviews nor evaluates the content of entries. Whether the data is true, false, test data, incomplete or inaccurate concerns the user exclusively.

The user is solely responsible for the legality, accuracy and use of the data they enter into iTefteri. The Company bears no liability for financial or other consequences arising from this data.

You can request deletion of your account in two ways: (a) directly within the application, under Account settings → Delete account, or (b) by request to info@itefteri.gr. Detailed instructions on the Account and data deletion page.

What is deleted: full name, email address, username, password, phone number, profile photo, comments and social media links.

What is retained and why: the business records you created (income and expense entries, working hours, cash movements) belong to the store, not to your personal account. They are retained in anonymised form, unlinked from you, because tax legislation requires accounting records to be kept.

Data retention periods:

• Active account: for as long as your subscription lasts.
• After subscription expiry: 12 months, so you can reactivate the account without data loss.
• After a deletion request: anonymisation within 30 days.
• Accounting and tax documents: 5 years, as required by Greek tax law, regardless of a deletion request.
• Log files: 12 months.
• Backups: up to 30 days on a rolling basis.

When a user optionally connects their Google account for appointment synchronization, iTefteri obtains limited access to Google Calendar data: permission to view the user's calendar list and permission to create, modify and delete events in the calendar the user selects.

• Synchronization can be two-way (iTefteri ↔ Google Calendar). From iTefteri to Google, events corresponding to the user's appointments are created and updated; from Google to iTefteri, limited details are retrieved (date/time and title/description as notes) in order to update or import the corresponding appointments.
• L.AN Cloud Labs P.C. does not sell, share, transfer or disclose Google data to third parties. Google data is not used for advertising or for the training of artificial intelligence or machine learning models (AI/ML).
• Google data is used exclusively to provide the calendar synchronization functionality requested by the user.
• Access may be granted only to: (a) the user themselves, (b) authorized company personnel when strictly necessary for technical support or maintenance, and (c) the cloud hosting infrastructure where the service is hosted, acting as a data processor.
• The user may at any time disconnect their Google account or revoke access via Google Account permissions.

iTefteri's use of Google API data complies with the Google API Services User Data Policy, including the Limited Use requirements.

The iTefteri mobile application is a natural extension of the web platform. It does not keep a separate database and does not collect data beyond what is described in this policy.

Device permissions that may be requested:

• Camera – only when you choose to: (a) photograph a receipt for automatic entry, (b) scan a QR code at the time-clock Kiosk, (c) attach a photo to a calendar entry. The application never activates the camera in the background.
• Files and storage – to download files produced by the platform (CSV exports, bank payment files, PDF documents) and to attach files to support requests.
• Notifications – for appointment and cheque reminders and platform notifications, if you enable them.

The application does not request and does not use: geolocation (GPS), microphone, biometric data, your device contacts, or access to SMS and calls.

Device identifiers: for login security (“remember me”) we store the device and browser type. We do not use advertising identifiers for targeting within the application.

We work with the following providers. Each one receives only the data necessary for the specific function.

• Viva Wallet (Greece) – subscription payment processing. Receives amount, full name and email. Your card details are entered directly in Viva’s secure environment and never pass through our systems.
• Google Gemini (Google Ireland Ltd.) – only if you use the automatic receipt reading feature. The photograph is sent in order to extract amount, VAT number and category.
• OpenAI Ireland Ltd. – only if you use the smart reports. Aggregated business figures are sent, not personal data of individuals.
• Google Calendar – only if you enable synchronisation. Appointment details are exported, including customer name, phone and email. Synchronisation is optional and disabled by default (see 2.7).
• Independent Authority for Public Revenue (AADE) – business lookup by VAT number and, if enabled, electronic transmission of documents (myDATA).
• Tawk.to – live support chat on our website. Enabled only with your consent.
• Google Ads – measuring advertising effectiveness on the itefteri.gr website. Enabled only if you accept the relevant cookies.
• Hosting provider – data is hosted on infrastructure within the European Union.

We do not sell and do not rent personal data to third parties.

iTefteri uses:

• Session cookies Help keep the user signed in as they move through the application, without having to log in on every page.
• Functional cookies May store small preferences, such as language or simple display settings, where applicable.
• Basic analytics cookies Allow the recording of general usage (e.g. which browsers are used most) without the use of personally identifiable data.

No advertising cookies are used within the application. On itefteri.gr (the landing page), optional tools may be used for analytics/marketing (Google) and live chat (Tawk.to), exclusively after consent given via the relevant banner.

The user may configure their browser to block or delete cookies. However, if the technical cookies are fully disabled, the service may not function properly or the user's session may not be maintained.

With regard to account details (email, password, etc.), the Company acts as Data Controller.

With regard to the data entered by the user in the context of operating their store (income, expenses, notes, etc.), the Company acts as data processor, providing only the technical platform for the storage and display of this data.

The user is fully responsible for the nature of the data they enter (e.g. whether it includes third parties' personal data, financial information, etc.). They must comply with data protection legislation when entering details concerning others.

The Company has no visibility into, and does not assess, whether the user has the right to enter the specific data. All responsibility for GDPR compliance with respect to the data the user enters rests with the user.

The Company applies technical measures such as:

• connection encryption (HTTPS),
• restricted access to production systems,
• basic backups for protection against technical failures.

Despite these measures, no system is completely invulnerable. The Company cannot promise full protection against every possible attack or technical failure, but makes reasonable efforts.

Every user has the rights provided by the GDPR:

• the right of access to their data,
• the right to rectification,
• the right to erasure,
• the right to restriction of processing,
• the right to data portability.

For related requests, the user may contact info@itefteri.gr.

The free trial normally lasts 20 days from the creation of the store. During this period the user may enter data and use the core features.

After expiry:

• access may be restricted,
• an active subscription may be required for full access,
• certain data may be retained, but may not be available without an active subscription.

Data entered during the trial period may continue to be used if the user activates a subscription. If no subscription is activated, the Company reserves the right to delete this data after a reasonable period of time.

The Company is not liable for the loss of trial data, especially when a long period of time has passed since the end of the trial.