1. Who We Are

Invoq (“we”, “our”, “us”) is an invoice processing platform for EU businesses. Our website is located at https://invoq.eu. For privacy-related questions, contact us at legal@invoq.eu.

2. What Data We Collect

When you create an account or use Invoq, we collect the following personal data:

• Email address — used to identify your account and send transactional emails
• Name — used to personalize your experience

When you upload invoices, receipts, or other documents, we collect and process the content of those documents (including any personal or business data contained within them) in order to provide the service.

We do not collect payment information, sensitive personal data, or any data beyond what is listed above.

3. How We Collect Your Data

• Google OAuth — when you sign in with Google, we receive your name and email address from Google. We do not receive your Google password or any other Google account data.
• Directly from you — if you provide your name or email through our interface.

4. How We Use Your Data

We use your data to:

• Create and manage your account
• Send transactional emails related to your use of the service (e.g. invitations, notifications)
• Communicate with you about your account

We do not sell your data. We do not use your data for advertising.

5. Third-Party Services

We use the following third-party services that may process your personal data:

• Google OAuth (Google LLC) — for authentication. Google Privacy Policy
• Resend (Resend Inc.) — for sending transactional emails. Resend Privacy Policy
• Third-party AI providers — for automated extraction of data from uploaded documents (invoices, receipts, images) and for AI-assisted features such as VAT classification and invoice search. Document content is sent to these providers solely for processing and is not used to train their AI models.

6. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days.

7. Your Rights (GDPR)

As an EU resident, you have the following rights regarding your personal data:

• Right to access — you can request a copy of the data we hold about you
• Right to rectification — you can request correction of inaccurate data
• Right to erasure — you can request deletion of your data
• Right to restriction — you can request that we limit how we use your data
• Right to data portability — you can request your data in a machine-readable format
• Right to object — you can object to our processing of your data

To exercise any of these rights, contact us at legal@invoq.eu. We will respond within 30 days.

8. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR:

• Contract performance — processing is necessary to provide the service you signed up for
• Legitimate interests — sending transactional emails related to your account

9. Data Transfers

Your data may be processed outside the EU by our third-party providers (Google, Resend, AI service providers). These providers maintain appropriate safeguards in compliance with GDPR.

10. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking or advertising cookies.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email. The date at the top of this page reflects the latest update.

12. Contact

For any privacy-related questions or requests:

• Email: legal@invoq.eu
• Website: https://invoq.eu