Privacy Policy

This policy explains what personal data i3billing processes, for which purposes, where it stays and for how long, who it is shared with, and how to exercise your rights. i3billing is a connector that exposes your Fatture in Cloud data to the Claude assistant.

1. Who we are

i3billing is operated by Ivan Bettarini (i3idea), Via Santa Margherita 33, Prato, Italy ("we", "us"). We are the data controller for the personal data described here.

Privacy contact: privacy@i3billing.com
VAT (P.IVA): 02583830977 — sole proprietorship

2. What we process

Sign-in data. When you sign in with Google, we receive and store an identifier for your account, your email address, your display name and your profile picture URL. We use them to create your account, recognise you on later visits, and contact you when needed.

Fatture in Cloud authorisation credentials. When you connect Fatture in Cloud, we store the OAuth tokens their system issues (access and refresh tokens and their expiry), an identifier for the authorised Fatture in Cloud account, and a descriptive label. These are the keys that let us query your data on your behalf. We never know or store your Fatture in Cloud password.

Preferences. The company you set as default, and the links between your user and the companies you administer.

Your accounting data: we do not keep it. Invoices, clients, amounts and due dates are not saved in our systems. When you ask a question we read them from Fatture in Cloud, use them to compose the answer, and return them to your conversation. We keep no copy, use them for nothing else, never sell them, and never use them to train models.

Support form data. The form on i3billing.com/support collects your name, your email address, your company (optional) and the text of your message. When you submit it, your browser sends them to our backend on app.i3billing.com, which forwards them from our servers to ProWoDo, i3idea's ticketing system, where they become a ticket on the i3billing support project. That hop through our backend leaves only the technical log described below: the message is not stored in a database of ours. We use them only to reply to you.

Change history. For security and diagnostics we keep a history of previous versions of the records listed above (account, authorisations, preferences).

Technical logs. Our hosting provider records service logs (requests, errors, timings) used to operate, protect and troubleshoot the service.

3. Why we process it, and on what basis

Purpose	Legal basis
Providing the service: authenticating you, connecting Fatture in Cloud, answering your questions	Performance of a contract
Security, abuse prevention, diagnostics	Legitimate interest
Responding to your support requests	Performance of a contract / legitimate interest
Tax and accounting obligations, if you become a paying customer	Legal obligation

We do not sell personal data. We share it only with the providers needed to run the service:

Google (Google Cloud, Firebase) — hosting, database and authentication. Our resources are hosted in the European Union.
Fatture in Cloud (TeamSystem) — the source of your accounting data: your requests are forwarded to their APIs using your authorisation.
Anthropic — when you use i3billing inside Claude, the connector's answers enter your conversation and are therefore processed by Anthropic under the terms of your relationship with them. This is the most important point in this policy: the data you ask for ends up in a conversation with an AI assistant, because that is exactly what this product does.
ProWoDo (i3idea) — if you write to us from the support form, your message and contact details go into our ticketing system, which we run ourselves on Google Cloud infrastructure in the European Union.

We may also disclose data where required by law or to establish or defend a legal claim.

5. Transfers outside the European Union

Our resources are hosted in the European Union, but two of the recipients listed above are US companies: Anthropic PBC and Google LLC. Using i3billing inside Claude therefore involves a transfer of personal data to the United States — the connector's answers enter the conversation, which is processed by Anthropic — and the same can happen with the Google services we use, when the provider's support or infrastructure operates from outside the Union.

For these transfers we rely on the safeguards in Art. 46 GDPR, specifically the standard contractual clauses included in these providers' data processing terms, together with the supplementary measures each of them documents. We do not rely on an adequacy decision: where a provider also joins an adequacy framework, that membership adds to the clauses rather than replacing them. You can ask us for a copy of the applicable safeguards by writing to privacy@i3billing.com.

If you do not want your accounting data to end up in a conversation with Claude, the choice is not to connect the connector: that transfer is what the product does by definition.

6. Where it stays, and for how long

Data is hosted on Google Cloud infrastructure in the European Union and is encrypted at rest and in transit by the platform's standard mechanisms.

Account and preferences: as long as you keep the account.
Fatture in Cloud authorisation credentials: until you disconnect them or delete your account.
Accounting data: not retained (see §2).
Change history: as long as you keep the account.
Technical logs: per the hosting provider's default retention periods.
Support tickets: as long as needed to handle the request and to keep track of recurring problems.

7. Cookies, fonts and services your browser loads

i3billing.com (this site) is static: no profiling cookies, no analytics, no tracking. It does load its fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com): your browser contacts Google's servers directly, and they see your IP address and the technical details of that request. When you submit the support form, your browser calls our own backend on app.i3billing.com (our server, not a third party's): from there we open the ticket on ProWoDo ourselves (see §2).

app.i3billing.com (the signed-in area) uses one technical session cookie. It keeps you authenticated while you navigate and lets the connector authorisation complete; it is set on the .i3billing.com domain because the OAuth consent happens on mcp.i3billing.com, it travels over HTTPS only, and it does not profile you. Sign-in does not work without it: it is a strictly necessary cookie and needs no consent.

8. Your rights

You can request access to your data, correct it, delete it, restrict or object to its processing, and receive it in a portable format. You can also revoke the Fatture in Cloud connection at any time — from your area on app.i3billing.com or directly in Fatture in Cloud: from that moment we can no longer read anything.

To exercise them, write to privacy@i3billing.com. You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).