Privacy policy

George Spyrou (a private individual), 94 Vasili Tsitsani St, 166 75 Glyfada, Greece. Contact for any data matter at hello@logariasmo.gr or by post at 94 Vasili Tsitsani St, 166 75 Glyfada, Greece.

We collect as little as possible. Comparisons work without a user account, a name or an email.

The file is processed in memory and not stored. Files over 4 MB are uploaded temporarily to private storage and deleted right after reading; if reading doesn't complete, the daily automatic cleanup removes them within 2 days at the latest. Names, addresses, tax IDs and supply numbers are not kept.

The details read (periods, kilowatt-hours, charges, supplier) are returned to your browser and kept only in that tab until you close it. On the server we log, for 24 hours, only the outcome of the reading (success or error code, method, supplier), without any bill content.

For photos, scans or PDFs that can't be read directly, the document is sent to OpenAI (a processor) solely for reading, with storage disabled on our side. For digital PDFs we first remove personal details from the text. OpenAI does not use API data to train models and may keep it for up to 30 days for abuse prevention, under its terms.

We store the usage profile (kilowatt-hours, meter, chosen plan) and the result for 30 days so the result link works. You can delete it earlier from the result page.

Your email is stored encrypted and used only for the alerts you asked for, after double opt-in. Unconfirmed sign-ups are deleted after 7 days. From every email you can stop or permanently delete your subscription.

This option appears only next to a plan with a disclosed partnership; there are none today. If you ask a partner to call you, we pass on only your name, phone and email, with your explicit consent, record the consent text and delete the request after 180 days.

We record aggregate events (e.g. “comparison completed”) without cookies or identifiers, for 395 days. Rate limits rely on an irreversible keyed hash of the IP address, deleted after 2 days. Technical errors are logged without bill contents for 90 days.

Bill reading and comparison: providing the service you request (GDPR Art. 6(1)(b)). Email alerts and call-back requests: your consent (Art. 6(1)(a)), which you can withdraw at any time. Security, abuse prevention and aggregate measurement: legitimate interest in running the service safely (Art. 6(1)(f)).

We don't sell data, don't do ad targeting and make no automated decisions with legal effects on you.

Vercel Inc. — application hosting. It logs technical request data (e.g. IP address) for security for a short period.

Supabase Inc. — database and temporary file storage, in an EU data centre.

Resend Inc. — delivery of alert and confirmation emails.

OpenAI — reading photos and scanned bills (see “AI-assisted reading”).

Where a processor is outside the EEA, the transfer relies on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses, under each provider's data processing terms.

Access, rectification, erasure, restriction, objection, portability and withdrawal of consent. Most can be exercised directly: the result page has a delete button and every alert email has a link to stop and permanently delete. For anything else write to us at hello@logariasmo.gr or by post at 94 Vasili Tsitsani St, 166 75 Glyfada, Greece; we reply within one month.

You also have the right to complain to the Hellenic Data Protection Authority (Kifisias 1-3, 115 23 Athens, www.dpa.gr).

The service is not aimed at people under 15. If processing changes, we update this page and its effective date; for material changes affecting alerts, we also tell subscribers by email.