This policy explains what InvoiceInspect ("we", "us") does with your information when you use this website and the invoice checker. We have tried to keep it plain and specific. If anything is unclear, contact us.

The short version

  • You can check invoices as a guest, with no account and no signup.
  • As a guest, your PDF and your results are not saved. The file is processed in memory while your request runs.
  • If AI is switched on, images of your invoice pages are sent to an AI provider to be read a second time. You can turn this off for each document.
  • We do not sell your data and we do not run advertising.

What happens to an invoice you upload

When you upload a PDF, our server reads it for the length of your request. It extracts the text, reads scanned pages with OCR if needed, recalculates the totals and builds the results page.

  • The file is not stored. It exists only in a temporary upload location for that request and is not kept afterwards.
  • The results are not stored on our servers. The results page carries the information it needs inside the page itself, in encrypted form. That is how the Download report (PDF) button and the "confirm a value" step work without us keeping anything. Closing the page ends it.
  • We do not read your invoices. No person at InvoiceInspect looks at the documents you upload.

Storing invoices and documents is optional, opt-in and limited to paid plans. It is not part of the free service, and this policy describes any storage before it is switched on for you.

AI processing

AI is part of how InvoiceInspect checks an invoice. We decide whether it is on, and there is no setting for it on the upload form. We can turn it off at any time, and the checks still work without it. When AI is on, the upload box says so.

When AI is on, the page images of your invoice are sent to a third-party AI provider that we choose. They are used to read the invoice a second time, to double-check one of our findings, and to word findings in plain language. The arithmetic that decides whether an invoice has an error is done by our own code, not by AI.

The AI provider processes that data under its own terms and privacy policy. We cannot control how a provider handles data on its side, so do not upload a document that must not leave our servers while the upload box says AI is on.

We keep a log of AI calls that contains only metadata: which provider and model, whether the call succeeded, how long it took, token counts and cost. It never contains your document, its images or the model's answer. These entries are deleted after 90 days.

Information we collect

Information When Why
Name, email address and password You create an account To run your account. Passwords are stored hashed, never in plain text.
Plan and account status You have an account To apply the right limits
IP address or account ID Each invoice check To apply usage limits and prevent abuse. Counters expire after a day.
Name, email, subject and message You use the contact form To reply to you
Technical request data (such as IP address, browser and time) You visit the site Standard server and error logs, used for security and fixing problems

We do not collect payment details on this site. If that changes, payments will be handled by a payment provider and this policy will describe it.

Email

We send email for account verification, password resets and replies to your messages. If email logging is enabled, we keep the recipient, subject and delivery outcome of those emails for up to 90 days. We never keep the message body in that log.

Cookies and similar storage

We use only what the site needs:

  • A session cookie keeps you signed in and protects forms against forgery (a security token).
  • Your theme choice (light or dark) is saved in your browser's local storage.

We do not currently use advertising cookies or third-party analytics. If that changes, we will update this policy first.

Who we share information with

  • Hosting and email providers that run the service and deliver our email.
  • AI providers, only when AI is used, and only the page images described above.
  • Authorities, if the law requires it.

We do not sell personal information.

How long we keep things

  • Guest uploads and results: not kept.
  • Account details: until you ask us to delete your account.
  • Usage counters: they expire automatically, within a day.
  • AI call logs and email logs: 90 days.
  • Contact messages: as long as needed to deal with them, then removed.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to certain uses, and to complain to your data protection authority. To use any of these rights, or to have your account deleted, contact us from the email address on your account. We will reply within a reasonable time.

Security

We take reasonable steps to protect your information. See our Security Practices for details. No online service can promise perfect security.

Children

InvoiceInspect is a business tool and is not intended for children.

Changes to this policy

We may update this policy. The "last updated" date at the top of the page shows when. If a change is significant, we will say so on the site.

Contact

Questions about privacy? Use our contact page.