Privacy Policy

This Privacy Policy describes how Invoice Extractor ("we", "us", or "our") collects, uses, and protects your personal information when you use our invoice data extraction service ("Service"). We are committed to protecting your privacy and handling your data transparently.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• Name (from Google Sign-In, if used)
• Profile picture (from Google Sign-In, if used)
• Account creation date

1.2 Uploaded Documents

When you use our Service:

• Invoice files (PDFs and images) you upload for processing
• Extracted data from your invoices
• File metadata (filename, file type, file size)

1.3 Payment Information

Payment processing is handled entirely by Stripe. We do not store your credit card numbers, bank account details, or other sensitive payment information. We only receive confirmation of successful payments and credit purchases.

1.4 Usage Information

We automatically collect:

• Number of extractions performed
• Credit balance and purchase history
• Login timestamps
• Basic analytics (pages visited, feature usage)

2. How We Use Your Information

We use your information to:

• Provide the invoice extraction service
• Process and manage your account
• Process credit purchases and payments
• Send service-related communications (e.g., purchase confirmations)
• Improve our Service and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations

3. Data Retention

3.1 Document Retention

Uploaded documents and extracted data are automatically deleted after 7 days. This includes:

• Original uploaded invoice files
• Extracted invoice data
• Processing metadata

3.2 Account Data Retention

Account information (email, name, credit balance) is retained until you delete your account. You can request account deletion at any time by contacting us.

3.3 Payment Records

Transaction records are retained for 7 years as required by tax and accounting regulations.

4. Data Security

We implement comprehensive security measures to protect your data:

• Encryption in Transit: All data is transmitted using 256-bit SSL/TLS encryption
• Encryption at Rest: Stored documents are encrypted
• Access Controls: Documents are only accessible to authenticated account owners
• Secure Authentication: OAuth 2.0 (Google) and secure email-based authentication
• Regular Security Reviews: We regularly review and update our security practices

5. Third-Party Services

We use the following third-party services to provide our Service. Your data may be shared with these providers as necessary:

6. International Data Transfers

Your data may be processed in countries outside your country of residence, including countries that may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards including:

• Contractual protections with service providers
• Technical security measures
• Data minimization practices

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Portability: Request your data in a machine-readable format
• Restriction: Request limitation of processing
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at privacy@invoiceextractor.app

8. GDPR Compliance (EEA Users)

If you are in the European Economic Area (EEA), we process your data based on the following legal bases:

• Contract Performance: Processing necessary to provide our Service
• Legitimate Interests: Analytics, security, and service improvement
• Legal Obligation: Compliance with applicable laws
• Consent: Where you have provided explicit consent

For business customers processing personal data through our Service, please see our Data Processing Agreement.

9. CCPA Compliance (California Users)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt-out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising your rights

10. Cookies and Tracking

We use essential cookies for:

• Authentication and session management
• Security purposes
• Remembering your preferences

We do not use advertising cookies or sell data to third-party advertisers.

11. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or to exercise your rights, contact us at: