Privacy Policy
Last updated: 15 October 2026
This Privacy Policy explains how Capital Accounting L.L.C. (“Capital Accounting”, “we”, “us”) collects, uses and protects personal data when you use the Capital Accounting mobile application (iOS and Android) and web application (together, the “App”). The App lets our clients send invoices, receipts and other accounting documents to our office, view declarations we prepare for them, and exchange messages with us.
1. Data controller and contact
Capital Accounting L.L.C.
Rruga Villiam Walker, Pn/ 20000 Prizren, Kosovo
Phone: +383 44 800 220
Email: kosovocapital.l.l.c@gmail.com
2. Who can use the App
The App is intended only for clients of Capital Accounting and our staff. Accounts are created by our office; there is no public sign-up. The App is not directed at children under 16, and we do not knowingly collect data from them.
3. Data we collect
| Category | Details | Purpose |
|---|---|---|
| Account data | Full name, email address, company name, user role, account status, preferred language. | Creating and managing your account, signing you in, identifying your documents. |
| Documents and files | Invoices, receipts, scanned pages, photos, PDF/Word/Excel files you upload, together with their category, date, description, file name, type and size. These files may contain personal or financial information that appears on them. | Providing our accounting and bookkeeping services to you. |
| Declarations | Tax declarations and other documents our office prepares and shares with you. | Delivering our work to you. |
| Messages | Content of messages exchanged between you and our office in the App, and read status. | Communicating with you about your services. |
| Device data | Push notification token (Firebase Cloud Messaging). | Sending you notifications about new messages, documents and declarations. |
| Activity log | Records of actions taken in the App (for example sign-in, document uploaded or deleted, message sent), with the time and the user who performed them. | Security, preventing misuse and keeping an audit trail of our work. |
We do not use advertising, we do not use analytics or tracking SDKs, and we do not sell or rent your personal data.
4. Camera, photos and files
The App asks for camera access only when you choose to scan a document, and for access to photos or files only when you choose to upload one. Document edge detection and cropping are performed on your device (Apple VisionKit on iOS, Google ML Kit Document Scanner on Android). Only the final file you confirm is uploaded to our servers.
5. Legal basis
We process your data to perform our service contract with you, to comply with our legal obligations as an accounting firm (including record-keeping requirements), and on the basis of our legitimate interest in keeping the App secure. Push notifications are sent only if you allow them on your device.
6. Where your data is stored
The App is built on Google Firebase (Firebase Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging and Hosting), provided by Google LLC / Google Ireland Ltd. Your data is stored on Google Cloud servers and may be processed outside Kosovo, including in the European Union and the United States. Google acts as our data processor under its data processing terms. See Firebase privacy and security.
7. Who can see your data
- You can see your own account, documents, declarations and messages.
- Authorized staff of Capital Accounting can see client data in order to provide our services.
- Google, as our hosting and infrastructure provider, as described above.
- Public authorities, only where we are required to by law.
Other clients cannot see your data.
8. Security
Data is transmitted over encrypted connections (HTTPS/TLS) and encrypted at rest by Google Cloud. Access is restricted by authentication and role-based security rules, so each client can only access their own records. Uploaded files are limited to supported document and image types.
9. Retention
We keep your data for as long as you are our client and your account is active. Documents may be kept afterwards for the period required by applicable accounting and tax laws. When an account is deleted, the account, its documents, declarations, messages and stored files are permanently removed from the App, except where we must keep records by law.
10. Deleting your account
You can request deletion of your account and associated data at any time by contacting us at kosovocapital.l.l.c@gmail.com or by phone. Please send the request from the email address registered to your account. We will process the request within 30 days and confirm once it is complete.
11. Your rights
Subject to applicable law (including Kosovo Law No. 06/L-082 on Protection of Personal Data and, where it applies, the EU General Data Protection Regulation), you have the right to access, correct, delete or obtain a copy of your personal data, to restrict or object to certain processing, and to lodge a complaint with the Information and Privacy Agency of Kosovo or your local data protection authority. To exercise these rights, contact us using the details above.
12. Changes to this policy
We may update this Privacy Policy from time to time. The latest version is always available on this page, with the “Last updated” date at the top. Significant changes will be announced in the App.