Termeni și Condiții

1. Acceptarea Termenilor

Accesarea și utilizarea platformei Deduct implică acceptarea integrală a prezentelor condiții. Dacă nu sunteți de acord cu acești termeni, vă rugăm să încetați utilizarea serviciului.

2. Descrierea Serviciului

Deduct is a cloud-based accounting and compliance platform built for Romanian businesses and accounting professionals. The platform provides:

• Invoicing — issue and receive compliant Romanian invoices, including e-Factura transmission to the RO e-Factura system (SPV).
• VAT compliance — VAT register, D300, D394, D406 (SAF-T), and TVA la încasare tracking.
• Payroll and HR — payroll calculation, D112 filing, payslips, leave management, and employee records.
• Accounting — automated journal entries, chart of accounts, trial balance, and working papers.
• Reporting — month-end close workflows, bank reconciliation, and financial reports.
• ANAF declarations — D100, D101, and other supporting filings.

We may add, modify, or remove features at any time. Where a change is material, we will give reasonable advance notice.

3. Accounts and Security

3.1 You must provide accurate, complete, and current information when creating your account and keep it up to date at all times.

3.2 You are responsible for all activity that occurs under your account, whether or not you authorised it. You must protect your login credentials and not share them with third parties.

3.3 Notify us immediately at legal@deduct.ro if you suspect any unauthorised access to or use of your account.

4. Free Trials

We may offer time-limited free trials at our discretion. These Terms — including the Data Processing Addendum in Part B — apply in full during any trial period. No payment details are required to start a trial unless explicitly stated. We reserve the right to modify, limit, or discontinue a trial at any time without liability.

5. Acceptable Use

You may use the service only for lawful purposes. You must not:

• Use the service in violation of Romanian law, EU law, or any other applicable law or regulation.
• Attempt to gain unauthorised access to any part of the service, its infrastructure, or other customers' data.
• Reverse-engineer, decompile, disassemble, or otherwise attempt to derive the source code of the platform.
• Use automated tools to scrape, crawl, or extract data without our prior written consent.
• Upload or transmit malicious code, viruses, or content designed to disrupt or damage the service.
• Attempt to circumvent or disable any security or authentication mechanism.
• Resell, sublicense, or make the service available to third parties except as expressly permitted.

We may suspend or terminate access immediately if we detect a violation of this clause.

5. Proprietate Intelectuală

6.1 The Deduct platform — including its source code, user interface, algorithms, and all proprietary content — is and remains our exclusive property and is protected by Romanian and EU intellectual property law.

6.2 Your data is yours. We claim no ownership over the accounting data, documents, declarations, or other content you create, upload, or generate within the platform.

6.3 You grant us a limited licence to store, process, and display your data to the extent necessary to operate and improve the service. This licence ends when you delete your data or terminate your account.

7. Compliance Responsibility

7.1 Deduct is a software tool, not a licensed accountant or fiscal representative (reprezentant fiscal). The platform generates accounting records, journal entries, and ANAF declarations based entirely on the data you enter. You remain solely responsible for:

• The accuracy, completeness, and legality of all data you enter into the platform.
• Reviewing all generated declarations, reports, and outputs before submission or use.
• Ensuring your use complies with Romanian accounting and tax regulations (Legea contabilității nr. 82/1991, OMFP 1802/2014, and the Codul Fiscal).
• All filings made using the platform — their correctness, completeness, and timeliness.

7.2 E-Factura deadlines. Under GEO 89/2025, invoices must be transmitted to the RO e-Factura system within 5 working days of the invoice issue date. Platform downtime on our part does not suspend this statutory obligation. We strongly recommend maintaining an independent submission capability as a backup.

7.3 Inbound invoices. Recording a supplier invoice that was not transmitted through the RO e-Factura system may expose you to regulatory penalties equal to the VAT value of that invoice. Verifying whether an inbound invoice was correctly submitted by the supplier is your responsibility.

7.4 CECCAR-certified accountants. You retain full professional and personal liability for all declarations you authorise or submit. Granting Deduct an MPO or Form 150 delegation does not transfer, reduce, or limit your professional liability.

8. Subscriptions and Payment

8.1 Access to the full feature set requires an active paid subscription. Prices are displayed excluding Romanian VAT (TVA), which will be added where applicable.

8.2 Subscriptions renew automatically at the end of each billing period unless you cancel before the renewal date. To cancel, use the account settings or write to legal@deduct.ro. Access continues until the end of the current period.

8.3 To avoid being charged for the following billing period, you must cancel at least 24 hours before the scheduled renewal date.

8.4 We do not offer refunds for partial billing periods as a general policy. Refund requests arising from genuine error will be considered on a case-by-case basis.

8.5 We reserve the right to change subscription prices with at least 30 days' written notice. If you do not accept a price change, you may cancel before it takes effect without penalty.

8. Disponibilitate

9.1 We aim to maintain high availability and will give reasonable advance notice of planned maintenance. We do not guarantee uninterrupted or error-free access.

9.2 ANAF and government infrastructure. Deduct integrates with ANAF's SPV, the RO e-Factura platform, and related government systems. We are not responsible for failures, delays, or errors caused by unavailability or malfunction of those government systems. You should monitor ANAF system status independently and maintain the capability to submit declarations by alternative means.

9. Limitarea Răspunderii

10.1 Aggregate cap. Deduct's total cumulative liability shall not exceed the subscription fees actually paid by you in the twelve calendar months immediately preceding the event giving rise to the claim.

10.2 Excluded losses. In no event shall Deduct be liable for:

• Fines, penalties, surcharges, or interest imposed by ANAF, ANSPDCP, or any Romanian or EU authority.
• Loss of VAT deductibility rights or other tax benefits.
• Losses arising from missed statutory filing deadlines.
• Indirect, incidental, special, consequential, exemplary, or punitive damages.
• Loss of business, contracts, revenue, profits, data, or goodwill.
• Errors in platform-generated outputs where those errors result from inaccurate or incomplete input data.

10.3 Force majeure. Neither party is liable for failures resulting from events beyond their reasonable control, including ANAF system outages, legislative changes, internet infrastructure failures, or other force majeure events. The affected party must promptly notify the other.

10. Încetarea Serviciului

11.1 By you. You may cancel your subscription and close your account at any time through account settings or by contacting legal@deduct.ro.

11.2 By us. We may suspend or terminate your access if you materially breach these Terms and fail to remedy the breach within 7 days of written notice, or engage in conduct that poses a security risk to users or the platform.

11.3 Data export. Following termination, you will have 30 days to export your data. After that period, your data will be permanently deleted. We strongly recommend exporting your data before cancelling.

11. Legea Aplicabilă

Acești termeni sunt guvernați de legea română. Orice litigiu va fi soluționat de instanțele judecătorești competente din București.

12. Modificări

Ne rezervăm dreptul de a modifica acești termeni, notificând utilizatorii prin email sau prin intermediul interfeței aplicației.

14. General

14.1 Entire agreement. These Terms (including Part B) constitute the entire agreement between you and Deduct regarding the service and supersede all prior agreements or representations.

14.2 Severability. If any provision is found invalid or unenforceable, it will be limited to the minimum extent necessary; the remaining provisions continue in full force.

14.3 No waiver. Failure to enforce any right or provision does not constitute a waiver of that right.

14.4 Assignment. You may not assign these Terms without our prior written consent. We may assign them in connection with a merger, acquisition, or asset sale.

13. Contact

Pentru întrebări privind acești termeni, ne puteți contacta la

legal@deduct.ro

B.1 Definitions

In this DPA:

• "GDPR" — Regulation (EU) 2016/679.
• "Law 190/2018" — Romania's national law supplementing and implementing GDPR.
• "Personal Data" — has the meaning given in Article 4(1) GDPR.
• "Processing" — has the meaning given in Article 4(2) GDPR.
• "Data Subject" — any identified or identifiable natural person whose data is processed under this DPA.
• "Sub-processor" — any third party engaged by Deduct to process Personal Data on the Controller's behalf.
• "Supervisory Authority" — ANSPDCP, Romania's national data protection authority.
• "EU SCCs" — Standard Contractual Clauses adopted by the European Commission for transfers to third countries.

B.2 Scope and Nature of Processing

B.2.1 Roles. The Controller determines the purposes and means of processing. Deduct acts exclusively as a Processor, processing Personal Data only on documented instructions from the Controller.

B.2.2 Categories of Personal Data processed may include:

• Employee names, CNPs, home addresses, and bank account details (payroll and HR features).
• Names and contact details of accountants and their staff.
• Names and contact details of client company representatives.
• Invoice-level transaction data that may identify natural persons (B2C transactions, PFA clients).

B.2.3 Categories of Data Subjects: employees of the Controller or its clients; accountants and their staff; customers and suppliers who are natural persons.

B.2.4 Purposes: Personal Data is processed solely to provide the Deduct platform services, including payroll processing, declaration generation, e-Factura submission, and accounting record management.

B.2.5 Duration: Processing continues for the duration of the active subscription. Upon termination, Personal Data is retained for up to 30 days to allow data export, after which it is permanently deleted.

B.3 Processor Obligations

Deduct shall:

• Process Personal Data only on documented instructions from the Controller, unless otherwise required by EU or Romanian law.
• Ensure all personnel with access to Personal Data are bound by appropriate confidentiality obligations.
• Implement appropriate technical and organisational security measures under Article 32 GDPR, including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security assessments.
• Provide reasonable assistance to the Controller in responding to Data Subject requests under GDPR Articles 15–22.
• Notify the Controller of any confirmed or suspected Personal Data breach within 72 hours of becoming aware.
• Make available information necessary to demonstrate compliance with this DPA and Article 28 GDPR.
• Delete or return all Personal Data upon termination in accordance with clause B.2.5.

B.4 Sub-processors

B.4.1 The Controller grants Deduct general written authorisation to engage Sub-processors. A current Sub-processor list is available at deduct.ro/legal/subprocessors or on request at legal@deduct.ro.

• Anthropic, Inc. — AI-powered document extraction and invoice processing (USA, EU SCCs apply).
• OpenAI, LLC — AI-powered invoice processing, escalation tier (USA, EU SCCs apply).
• Google LLC — anonymised marketing analytics for the platform website only; no accounting data shared (USA, EU SCCs apply).
• Cloud infrastructure provider — hosting, storage, and database services (EU).

B.4.3 Deduct will give the Controller at least 30 days' prior written notice before adding or replacing any Sub-processor. The Controller may object within that period. If unresolved, the Controller may terminate the service without penalty.

B.4.4 Deduct will impose data protection obligations on each Sub-processor equivalent to those in this DPA.

B.5 International Data Transfers

Where Sub-processors are outside the EEA, all transfers of Personal Data are conducted under EU Standard Contractual Clauses (Module 2: Controller to Processor) as adopted by the European Commission Decision of 4 June 2021. Deduct will update its transfer mechanisms to remain compliant with changes to applicable EU transfer rules.

B.6 CNP (Cod Numeric Personal) Processing

The Romanian personal identification number (CNP) constitutes sensitive personal data under Law 190/2018, Article 6. Deduct processes CNPs only where strictly necessary for payroll processing, D112 generation, and legally mandated ANAF reporting. CNPs are never used for marketing, profiling, or any purpose not required to deliver the service.

B.7 Controller Obligations

The Controller warrants that:

• It has and will maintain a valid lawful basis under Article 6 GDPR for all Personal Data it provides to Deduct.
• It has provided or will provide all notices required by GDPR to affected Data Subjects.
• It will not instruct Deduct to process Personal Data in a manner that would breach GDPR or applicable Romanian law.

B.8 Data Subject Rights

Where Deduct receives a request directly from a Data Subject exercising rights under GDPR (Articles 15–22), Deduct will forward the request to the Controller without undue delay and will not respond on the Controller's behalf without prior written authorisation.

B.9 Data Protection Impact Assessments

Where the Controller determines that a DPIA is required under Article 35 GDPR in connection with processing activities carried out by Deduct, Deduct will provide reasonable cooperation upon written request.

B.10 Audit Rights

The Controller may audit Deduct's compliance with this DPA no more than once per year, on at least 30 days' prior written notice. Deduct may satisfy an audit request through relevant documentation, security certifications, or written questionnaire responses in lieu of on-site inspection.

B.11 Liability

Each party's liability under this DPA is subject to the limitations in clause 10 of Part A. Nothing here limits either party's liability to the extent prohibited by Article 82 GDPR.

B.12 Governing Law

This DPA is governed by Romanian law and is subject to the jurisdiction clause in clause 12 of Part A. EU law prevails over Romanian law where the two are inconsistent in respect of data protection obligations.