Privacy policy
PLACEHOLDER — HAVE THIS REVIEWED BY A LAWYER BEFORE PROCESSING CUSTOMER DATA AT SCALE. It describes current v1 behaviour accurately but is not legal advice and is not a complete GDPR-compliant policy.
What we process. Invoice data you enter is processed in memory to generate and validate the XML and, if you choose to send, forwarded to a certified Peppol access point for delivery. In v1 we do not store invoice contents in a database. Your sender details are saved in your own browser (localStorage), not on our servers.
Payments. Handled by Stripe. We never see your card number. We store no customer database in v1; your subscription lives in Stripe.
Directory checks. Queries are forwarded to the public Peppol Directory operated by OpenPeppol.
Analytics. First-party event counts (page viewed, invoice generated, etc.). No advertising trackers.
Logs. Standard server logs (IP address, timestamps) are retained by our hosting provider for security and debugging.
Contact. Use the feedback button or the email in your receipt for any privacy request.