Privacy Policy

1. Data Controller

[COMPANY NAME]
[ADDRESS]
Data Protection Officer: [DPO CONTACT]

2. Data We Process

  • Invoice files: PDFs and XML files you upload for validation or conversion
  • Email address: Collected only when you sign up for the waitlist or a paid plan
  • Usage data: How you use the service (e.g., validation or conversion requests)

3. Purpose of Processing

  • To provide invoice validation and conversion services
  • To communicate about your account or plan
  • To comply with legal obligations
  • To improve our service (aggregate, anonymized data only)

4. Data Retention

Invoice files: Automatically deleted 24 hours after upload. No copy is retained.

Waitlist signups: Retained until you unsubscribe or request deletion.

Account data: Retained for the duration of your account and 30 days after deletion.

5. Legal Basis

Processing is based on: (a) your consent, (b) contractual necessity, or (c) our legitimate interest in providing and improving the service.

6. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access your personal data (Art. 15)
  • Correct inaccurate data (Art. 16)
  • Request deletion ("right to be forgotten") (Art. 17)
  • Restrict processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing (Art. 21)
  • Lodge a complaint with your local data protection authority

To exercise these rights, contact [DPO EMAIL].

7. Data Location

All data is hosted and processed in the European Union ([HOSTING PROVIDER LOCATION]).

8. Third Parties

We do not share your invoice content with any third party. Email addresses for waitlist signups are retained only by us and may be used for service notifications.

9. Changes to This Policy

We may update this policy. The latest version is always available on this page.

10. Contact Us

Questions about this privacy policy? Contact [DPO EMAIL].

← Back to home