PRIVACY / PUBLIC SITE
A smaller data footprint.
The public site is a collection of static pages. Browsing the examples does not send your document data to the API.
No profiling cookies
This site does not set cookies, run advertising pixels, or perform individual profiling. It does not require a cookie consent banner. Language is selected solely via the URL path. To understand traffic volumes and page usage we will use Cloudflare Web Analytics: lightweight aggregate measurement without cookies or persistent fingerprinting, operated by the same edge provider that already routes and protects our traffic. Collection is not active yet: this site currently performs no measurement.
Website measurement with Cloudflare Web Analytics
Collection not active yet
The controller is Apdsoftware di Carlo Zuffetti, Via C. Colombo, 15, Treviglio (BG), Italy; privacy contact: privacy@sysyinvoice.com.
We will use Cloudflare Web Analytics on our public website to obtain aggregate statistics about page views and technical quality, helping us improve content and identify loading problems. This measurement will not cover the Console, API or document contents and will not be used for advertising or individual profiling.
Data sent will include page/referrer, timestamps, a page-view identifier and loading, interaction and memory metrics, where available; statistics will include country, browser, operating system and device. According to Cloudflare, the RUM IP received during connection is discarded at the receiving data centre, not retained in core databases or RUM logs; proxy and security logs are separate.
Our legal basis for processing personal data will be our legitimate interest in operating and improving the website under Article 6(1)(f) GDPR. In the configuration described here, limited to aggregate statistics without analytics cookies, persistent identifiers, fingerprinting or combination with individual data, the absence of prior consent and a dedicated banner relies on the exemption for statistical tools treated as technical tools, subject to the applicable legal conditions. Where the law requires consent, collection without consent remains excluded. You may object to personal data processing on grounds relating to your particular situation through the privacy contact above.
Cloudflare retains unsampled beacons for seven days, then maintains a reduced dataset for historical analysis. Statistics will be accessible for the preceding six months; we will not create a separate archive. This window does not guarantee deletion of every technical copy after six months. Personal data processed on our instructions follows the retention criterion of the data processing agreement; independent processing follows Cloudflare's own privacy policy criteria.
The data processing agreement limits retention to contractual necessity or earlier contract termination, with deletion or return subject to legal obligations.
Cloudflare, Inc. already provides the website's proxy and will act as processor for processing on our instructions; its policy distinguishes additional processing as an independent controller. Its global network may involve processing outside the EEA, including in the United States: European origin hosting does not mean exclusively European processing. The agreement provides for the EU-US Data Privacy Framework for covered transfers and standard contractual clauses for restricted transfers. You may request information and a copy of the safeguards through our privacy contact; other applicable rights and the right to complain to the Italian supervisory authority remain available.
Local resources
Fonts, styles and the fictional PDF example are served directly by our origin server. No font CDN, embedded third-party PDF viewer or external media is loaded. The only remote asset planned is Cloudflare's aggregate measurement script (static.cloudflareinsights.com), provided by our edge network without storing cookies or persistent identifiers on your device; it is not loaded yet, because collection is not active.
Document processing
The API processes JSON and generated PDF bytes in volatile memory. It does not archive documents. Server infrastructure is located in Germany (Hetzner). Data controller: Apdsoftware di Carlo Zuffetti, Treviglio (BG), Italy; privacy contact: privacy@sysyinvoice.com. Account details and templates are separate application data; technical request metadata is retained for seven days.
The Console is separate
Following a Console link opens app.sysinvoice.com. Authenticated account functions and their necessary session mechanisms belong to that application, not this static public site.
This page is the privacy notice for the public website under Articles 12 and 13 GDPR and is kept in step with what the site actually loads. Documents submitted to the API, the Console and the subprocessor list are covered by the service agreement and the data processing agreement, available through the privacy contact above.