Privacy Policy

1. Who is responsible

The operator of e:corg one is named in the box at the top of this page. For privacy questions and requests write to hello@ecorg.one.

We act in two roles. For your user account, your company's subscription and this website we are the controller. For the business data you and your team enter into e:corg one (documents, customers, suppliers, the people named in them) your company is the controller and we are its processor under Article 28 GDPR; the terms of that processing are part of our Terms of Service.

Data Processing Agreement

2. What we process

• Account data: name, email address, a hash of your password (never the password itself), the language you choose and, if you use them, the identifier from Google or marql sign-in.
• Team data: who belongs to your organization, their role and the stores they are bound to, invitations.
• Company data: name, tax code (CUI, EIK or VAT number), address and VAT status. When you enter a tax code we look it up in public registers: ANAF for Romania and the European Commission's VIES for other EU countries.
• Business documents: invoices, credit notes, receipts, transfers, stock counts, payments, bank statements and the e-Factura you receive or send through ANAF's SPV. They may contain names, addresses and contact details of your customers, suppliers and employees.
• Emails the application sends for you (invoices to your customers, invitations): recipient address, subject, attachment and delivery status.
• Requests from the contact form on this website: your name, email address and phone number and, if you fill them in, your company or tax code and your message, with the page you sent them from.
• Technical data: IP address, browser type, time of requests, security logs and an activity log of who did what in your organization.

3. Why and on what legal basis

• To provide the service you signed up for: accounts, documents, stock, postings, exports (Article 6(1)(b) GDPR, performance of a contract).
• To keep invoices and billing records as tax and accounting laws require (Article 6(1)(c), legal obligation).
• To keep the service secure, prevent abuse and fix errors, using logs and rate limits (Article 6(1)(f), legitimate interest).
• To answer when you write to us or send the contact form on this website, and to tell you about changes to the service (Article 6(1)(b) and (f)).

We do not sell personal data, do not use it for advertising and do not build marketing profiles.

4. Who helps us (recipients)

• Railway Corporation: hosting of the application and its database, in Railway's EU West region (European Union).
• Resend: delivery of the emails the application sends, from its EU region.
• Our customer relationship system (CRM), which we run ourselves on Railway: requests from the contact form on this website are stored and answered there.
• ANAF (Romanian tax administration): when you connect SPV, we download and upload e-Factura on your company's behalf; company lookups by CUI.
• European Commission (VIES): company lookups by VAT number.
• Google: only if you choose to sign in with Google. This website also loads its fonts from Google Fonts, so Google receives your IP address when you open a page.
• MARQL LTD (marql, our sister analytics product; established in the United Kingdom, data stored in the EU): our sub-processor for the marql analytics built into e:corg one, on by default with its free tier (section 5), and for sign-in with marql if you use it.
• Apple (Apple Push Notification service) and Google (Firebase Cloud Messaging): delivery of notifications to the e:corg one phone app, only if you turn them on; a notification shows no amounts unless you choose to see them.

Some of these providers are based in the United States or the United Kingdom. Transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses, and for the UK on the Commission's adequacy decision.

5. marql analytics (sub-processor)

• Who: MARQL LTD, which operates marql, the analytics and AI assistant built into e:corg one. For your business data your company is the controller, e:corg one is its processor and MARQL LTD is our sub-processor under Article 28(4) GDPR, bound by the same duties of confidentiality, security, assistance and deletion as we are.
• What: a read-only copy of the organization's business data (stores, items, suppliers, documents, stock and sales, which may include names and contact details of your customers, suppliers and employees) and, for the marql chat and "Open in marql", the question asked and the internal identifier, role, stores, name and email address of the person using them.
• Why: only to compute signals, forecasts, reports and answers for your own organization. marql does not use your data for other customers or for its own purposes.
• Where: marql stores the data in the European Union. Its database is on Amazon Web Services in Stockholm (eu-north-1), its application on Railway (EU) and generated files on Cloudflare R2 (EU). MARQL LTD is established in the United Kingdom, which is covered by the European Commission's adequacy decision. For AI answers marql uses open-weight models through Together AI, Groq and Fireworks AI (United States) as its own sub-processors, under data processing agreements and without training on your data; store and partner names are replaced with codes before a question leaves marql. Traces of AI calls go to Langfuse (EU), metadata only. marql's full list: marql.one/subprocessors.

marql is switched on for every organization with its free tier, as part of the service; no separate consent is needed. The owner or an administrator can turn marql off at any time in Settings → Integrations: e:corg one revokes marql's access at once, so marql receives no further data, and asks marql to delete the organization's data under its deletion policy; if marql does not confirm the deletion, e:corg one keeps asking until it does. marql then stays off until they turn it on again. We record who turned it off and when.

Anonymized benchmarks are a separate purpose and remain your choice. Only if your organization opts in (when the company is set up or later in Settings) may marql use aggregated figures of your business in comparisons between businesses; a comparison is shown only when its group is large enough that no single business can be recognized. The opt-in can be withdrawn at any time; we record who gave or withdrew it, when, and which version of the wording they saw.

6. How long we keep data

Account and team data are kept while your account exists. Business documents are kept while your company's subscription is active and afterwards only as long as you need to export them or the law requires. Invoices we issue to you are kept for the period required by accounting law. Security logs are kept for a limited period and then deleted. Requests from the contact form are kept while we are in contact with you about them, and deleted when you ask.

7. Security

Traffic is encrypted (HTTPS). The database is reachable only from the application's private network. Access keys for integrations, such as the ANAF connection, are stored encrypted. Inside an organization each person sees only what their role and stores allow.

8. Your rights

• Access to your data and a copy of it.
• Correction of inaccurate data and deletion of data we no longer need.
• Restriction of processing and objection to processing based on legitimate interest.
• Data portability: your business data can be exported (SAF-T, SAGA export, CSV and the export API).
• A complaint to a supervisory authority: the CNIL in France (cnil.fr), our lead authority, since the operator, KD Bureau SAS, is established in Paris; in Romania ANSPDCP (dataprotection.ro); in Bulgaria the Commission for Personal Data Protection (cpdp.bg); or the authority of your EU country. In the United Kingdom: the ICO (section 9).

Write to hello@ecorg.one. We answer within one month. For data your company entered as controller, we forward the request to your company or help it answer.

9. Users in the United Kingdom

• If you are in the United Kingdom, the UK GDPR and the Data Protection Act 2018 apply to the processing of your personal data. You have the same rights as in section 8, and we process your data on the same legal bases as in section 3.
• You have the right to complain to the Information Commissioner's Office (ICO), ico.org.uk. We would appreciate the chance to deal with your concern first: write to hello@ecorg.one.
• Your data is hosted in the European Union (section 4). Transfers from the UK to the EU are covered by the UK adequacy regulations for the EEA; transfers from the EU to the UK, including to MARQL LTD, by the European Commission's adequacy decision for the United Kingdom, renewed in December 2025 and valid until 27 December 2031.
• Where a company in the United Kingdom uses e:corg one, it is the controller of its business data and we are its processor under Article 28 UK GDPR, on the terms of our Data Processing Agreement.

10. Cookies

This website sets one cookie, and only when you close the cookie notice: it remembers that you did. It uses no analytics or advertising trackers. The application uses only strictly necessary cookies that keep you signed in. The details are in the Cookie Policy.

11. Changes

We will update this page when our processing changes and change the date at the top. Significant changes are announced in the application or by email.