Privacy Policy
Document version 2026-07-16-v2 · effective 2026-07-16.
Who we are
The einvoicecheck.eu service (einvoicecheck) is the data controller for account and operational data described here. Contact: privacy@einvoicecheck.eu. Registered business details are published on /legal/impressum before paid checkout opens.
Summary
We do not store your invoice XML. Payloads are processed in memory for validation and discarded. We do store account data, usage metadata, and limited operational logs as described below.
Data we process
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email address | Account, magic-link sign-in, transactional notices | Contract (Art. 6(1)(b) GDPR) | Until account deletion + short backup window |
Session cookie (__Host-eiv_session) | Dashboard authentication | Contract / legitimate interest | Up to 30 days; see Cookies |
| API key hashes & masked prefixes | Authentication | Contract | Until revoked or account deleted |
| Usage counters (validations, VAT checks) | Quota enforcement, billing fairness | Contract | While account active; period keys roll monthly |
| Subscription state | Plan entitlements | Contract | While account active; billing records longer if required by tax law |
| Validation request metadata (request id, key id, format, sizes, timings, failed rule ids) | Operations, abuse prevention | Legitimate interest (Art. 6(1)(f)) | Server logs — typically days to weeks on the host |
| Invoice XML content | Validation | Contract (processor role for business customers) | Not persisted — processed in memory only |
| VIES query results (VAT number, name, address when returned) | VAT check API + cache | Contract / legitimate interest | Cache up to ~8 days after expiry; stale fallback up to ~30 days during outages |
| Magic-link tokens | Passwordless sign-in | Contract | Until expiry + 24 h |
| Email delivery log (quota warnings, etc.) | Idempotent lifecycle emails | Contract | Up to 180 days |
| Webhook idempotency keys | Billing correctness | Contract | Up to 90 days |
Processors and recipients
- Netcup (Germany) — application hosting, PostgreSQL database, on-server backups (14-day retention).
- Resend (EU region) — transactional email delivery.
- Lemon Squeezy — payment processing and subscription management (merchant of record).
- European Commission VIES — VAT number verification (you may optionally pass a requester VAT number).
We do not sell personal data. We do not use advertising or analytics cookies.
International transfers
Primary processing is in the EU. If a subprocessor transfers data outside the EEA, we rely on appropriate safeguards (e.g. Standard Contractual Clauses) where required.
Your rights
Depending on applicable law you may have rights to access, rectify, erase, restrict, object, and port your data, and to withdraw consent where processing is consent-based. Use privacy@einvoicecheck.eu or the account tools in the dashboard. We respond within one month where GDPR applies.
You may lodge a complaint with the Slovenian Information Commissioner (ip-rs.si).
Security and breaches
We use TLS, hashed API keys, rate limits, and EU-region hosting. No system is perfectly secure. If a personal-data breach likely affects your rights, we will notify you and regulators as required by law.
Automated decisions
We do not make solely automated decisions with legal or similarly significant effects on you.
Children
The Service is not directed at children under 16.
Changes
We will post updates here with a new version date. Material changes may require renewed acceptance.