Privacy Policy

Privacy Policy

Effective Date: 16.05.2025
Last Updated: 16.05.2025

At Invograb (“we”, “our”, or “us”), we are committed to protecting your privacy and handling your data with transparency and respect. This Privacy Policy explains how we collect, use, store, and share your personal and business information when you use our service.

1. Who We Are

Invograb is a cloud-based invoice aggregation and compliance platform owned and operated by 3F Venture S.A., registered in Luxembourg. We help businesses centralize and manage their invoices to comply with EU mandates like Factur-X, Peppol, and local VAT regulations.

2. What Data We Collect

We collect and process the following types of data:

a) Account Information

• Name, email address, company name, phone number

• Login credentials

b) Billing & Payment Information

• Billing address

• VAT ID

• Payment method details (via secure third-party providers)

c) Invoice Data

• Uploaded invoices (PDF, XML, images, etc.)

• Metadata from invoices (dates, amounts, suppliers, VAT info)

d) Usage Data

• IP address, device type, browser

• Pages visited, actions taken in the app

• Error logs and support interactions

3. How We Use Your Data

We use your data to:

• Deliver and improve the Invograb service

• Tag, categorize, and organize invoice data

• Ensure regulatory compliance (e.g., Factur-X, Peppol, VAT rules)

• Send important service-related updates

• Provide customer support

• Improve product performance and security

We do not sell or rent your data to third parties.

4. Legal Basis for Processing

Under the GDPR, we process your data based on:

• Your consent (e.g., when you subscribe to newsletters)

• Contractual necessity (to provide the service)

• Legal obligations (e.g., tax reporting)

• Legitimate interests (e.g., fraud prevention, platform security)

5. Data Sharing and Third Parties

We may share your data with trusted third-party services for the following purposes:

• Hosting & Cloud Infrastructure: e.g., AWS, Google Cloud

• Payment Processing: e.g., Stripe

• Analytics: e.g., Google Analytics (self-hosted GDPR-compliant tools)

All third parties are vetted to comply with GDPR and are bound by strict data processing agreements.

6. Data Retention

We retain your data:

• As long as you have an active account

• Up to 6 months after cancellation, unless legally required to store longer

• You can request deletion of your data at any time (see Section 9)

7. Data Security

We implement industry-standard security measures to protect your data:

• Encrypted data in transit and at rest

• Role-based access controls

• Regular security audits

8. International Data Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure adequate protection through:

• Standard Contractual Clauses (SCCs)

• Hosting in GDPR-compliant regions

9. Your Rights Under GDPR

You have the right to:

• Access your data

• Correct inaccurate data

• Request deletion (right to be forgotten)

• Object to processing

• Restrict processing

• Data portability

• Withdraw consent at any time

To exercise your rights, contact us at [email protected].

10. Cookies

We use essential cookies for platform functionality and analytics. We do not use cookies for advertising.

You can control cookies via your browser settings.

11. Changes to This Policy

We may update this Privacy Policy periodically. You’ll be notified of any material changes, and your continued use of Invograb means you accept the updated policy.

12. Contact Us

For any privacy-related questions or requests:
📧 Email: [email protected]
📍 Address: 9 rue du Laboratoire 1911, Luxembourg