Privacy notice
Draft. The legal entity that operates Invoice Review, and its contact details, will be named here before launch. Until then this page describes, accurately, what the software does with data, but it is not yet a complete notice under Article 13 GDPR.
Who is responsible
Operator (controller for account data; processor for the documents customers upload): to be confirmed before launch.
What we process
| Data | Why | Kept |
|---|---|---|
| Your name, email address, a hash of your password, sign-in sessions (IP address and browser identifier) | To give you an account and keep it secure | While the account exists; sessions expire after 7 days |
| Documents you upload, the data read from them, your corrections and decisions | To provide the service to your organisation | Until your organisation deletes them or erases the organisation |
| Bank statement lines you import | To match payments to documents | As above |
| Audit log of actions (who did what, when) | So your organisation can prove what happened | As above |
| Server logs (errors, request identifiers) | To run and fix the service | Rotated by the server's log policy |
There are no analytics, advertising or tracking cookies. The only cookie is the sign-in session cookie.
Where it is processed, and by whom
| Provider | Role | Location |
|---|---|---|
| Alibaba Cloud | Hosting: the server, the database and its backups | Frankfurt, Germany (region eu-central-1) |
| Amazon Web Services (Amazon Bedrock), running Anthropic's Claude model | Reading uploaded documents | AWS's European regions. Requests go to AWS Frankfurt and use Bedrock's European ("EU") inference profile, which AWS states keeps data within its European regions. AWS states that the model provider (Anthropic) has no access to prompts or outputs. AWS may retain request data for abuse detection under its data-retention settings; where it does, it is stored in the European region that processed the request. |
AWS's European geography for Bedrock may include regions outside the EU, such as London. Invoice Review does not claim EU-member-state-only processing unless AWS confirms it for this profile.
There is no hosting in the Gulf (GCC) region at present, and Invoice Review makes no GCC data-residency claim.
Backups
The database is backed up nightly to the same server. Backups are kept for 14 days and then deleted automatically, so data you erase remains in backups for up to 14 days.
Your rights
You can ask for access to, correction of, or deletion of your personal data, and you may complain to a data protection authority. An organisation's owner can erase all of the organisation's data in Settings at any time. Contact details for requests will be published here before launch.