Terms of Service

Last updated: 18 August 2026

1. Who we are

Factando ("we", "us") provides an online invoicing service for freelancers and small businesses (the "Service"), available at this website. By creating an account you agree to these terms.

2. Your account

You must provide accurate information and keep your password secure. You are responsible for all activity under your account. You must be at least 18 years old and using the Service for business purposes.

3. The Service

The free plan includes a limited number of invoices and clients per month; paid plans lift these limits. We may change features over time. We aim for high availability but do not guarantee uninterrupted access.

4. Your content

Invoices, client records and business details you enter remain yours. You grant us the right to store and process them solely to operate the Service. You are responsible for the accuracy and legality of the invoices you create, including tax (VAT) compliance in your jurisdiction. Factando does not provide tax, accounting or legal advice.

5. Payments & cancellation

Paid subscriptions are billed in advance via Stripe, monthly or yearly, plus applicable VAT. You can cancel at any time from the billing portal; your plan remains active until the end of the paid period. Fees already paid are non-refundable except where required by law. EU consumers: by starting the subscription immediately you consent to immediate performance and acknowledge the 14-day withdrawal right lapses once the digital service is fully provided.

6. Acceptable use

You may not use the Service for fraudulent invoicing, spam, unlawful activity, or to infringe the rights of others, and you may not attempt to disrupt or reverse engineer the Service. We may suspend accounts that violate these terms.

7. Liability

The Service is provided "as is". To the maximum extent permitted by law, our total liability for any claim is limited to the amount you paid us in the 12 months before the claim arose. We are not liable for indirect damages such as lost profits or lost data, though nothing limits liability for intent or gross negligence.

8. Termination

You may delete your account at any time. We may terminate accounts with reasonable notice, or immediately for serious violations. On termination we will make your data available for export for 30 days. Important: under Dutch tax law (art. 52 AWR) you are personally required to keep your invoice records for at least 7 years. Export your invoices (CSV/UBL/PDF) before closing your account, after the 30-day window we can no longer provide them.

9. Changes & governing law

We may update these terms; material changes will be announced by email or in the app at least 14 days in advance. These terms are governed by Dutch law; disputes go to the competent court in the Netherlands.

10. Contact

Questions? Email support@factando.com.

11. Data Processing Addendum (verwerkersovereenkomst, art. 28 GDPR)

Where you store personal data of your own clients in the Service (names, addresses, email addresses, invoice details), you are the controller and Factando acts as your processor. This section constitutes the written data processing agreement between you and Factando and forms an integral part of these terms.

Subject, duration and nature. We process your clients' personal data solely to provide the invoicing Service (storing client records, generating and delivering invoices and payment reminders), for as long as your account exists, plus the 30-day export window after deletion.

Your instructions. We process this data only on your documented instructions, which you give by using the Service (e.g. clicking "send invoice"), and never for our own purposes, advertising or resale. Persons authorised to process the data are bound by confidentiality.

Sub-processors. You authorise the following sub-processors: Vercel (hosting), Neon (database, EU region Frankfurt), Stripe (subscription payments) and Resend (transactional email, only when you email an invoice or a reminder is sent). We will announce changes to this list with at least 14 days' notice, giving you the right to object.

Security (art. 32 GDPR). We apply appropriate technical and organisational measures: TLS encryption in transit, encrypted storage, bcrypt-hashed passwords, role-based access, EU data residency for the database, and audit logging of invoice events.

Assistance and incidents. We will assist you, where reasonably possible, with data-subject requests (access, correction, deletion) and with your own security obligations. We will inform you without undue delay after becoming aware of a personal data breach affecting your clients' data.

End of processing. Upon account deletion your data, including your clients' personal data, is deleted within 30 days, except where we are legally required to retain billing records. You can export your data at any time (CSV/UBL/PDF).