Privacy policy

What Invoice Auto does with your data, why, where it is stored and what you can ask for. Written to be understood.

Who is responsible

Invoice Auto is operated by Vidal Reñao, Basel, Switzerland. For anything about personal data: vidalrenao.lab@outlook.com.

What we process

Only what running the service requires:

  • Account data: name, email address and an encrypted password.
  • The documents you upload: receipts and invoices, and the data they contain (supplier, amounts, VAT, IBAN and payment reference where printed).
  • Technical logs needed to operate and protect the service.

Why

To extract the data from your documents, show it to you, let you review and export it, and to decide and prepare payment files when you use that feature. The legal basis is performance of the contract you enter when you create an account.

We do not sell your data, do not share it for advertising and do not use it to train AI models.

Who else is involved

Three providers, all acting as processors:

  • Anthropic (Claude Vision): receives the uploaded document to extract its data.
  • Supabase: database and file storage, region eu-central-2 (Zurich, Switzerland).
  • Vercel: hosting and rendering, region fra1 (Frankfurt, Germany).

Where it lives

Documents and extracted data are stored in Switzerland (Supabase, eu-central-2). The application runs in Germany (Vercel, fra1). Extraction through Claude Vision may involve a transfer to the United States under the provider’s standard contractual clauses.

For how long

While your account is active. You can delete individual documents at any time and request full account deletion by email. The payment audit log is immutable by design: it is never edited or deleted, because its value depends on that.

Your rights

Access, rectification, erasure, restriction, portability and objection — by email to the contact address. You may complain to your data protection authority in the EU, or to the FDPIC in Switzerland.

Cookies

Only technical cookies: one to remember your language, and those needed to keep you signed in. No advertising or third-party tracking cookies. Our usage analytics are aggregated and cookie-free.