This Privacy Policy explains how Ekspose BV ("we", "us", "our") collects, uses, and protects personal data when you use invoice-grabber.com and related services (the "Service").

1. Information We Collect

We collect only what we need to operate the Service.

1.1 Information you provide

• Account information (name, email address, company name)
• Authentication data (OAuth identifiers when connecting third-party services)
• Billing information (handled by our payment provider; we do not store card details)
• Support communications

1.2 Information collected automatically

• Log data (IP address, timestamps, device/browser info)
• Usage data (features used, actions taken)
• Cookies and similar technologies for authentication and analytics

1.3 Third-party data

When you connect external services (e.g. email, storage, accounting tools), we process data strictly to perform the requested functionality.

2. How We Use Data

We use personal data to:

• Provide and operate the Service
• Authenticate users and secure accounts
• Process invoices, documents, and workflows as instructed by you
• Improve product performance and reliability
• Communicate about service updates or support requests
• Meet legal and compliance obligations

We do not sell your data.

3. Legal Basis (GDPR)

We process data based on:

• Contractual necessity (providing the Service)
• Legitimate interest (security, product improvement)
• Consent (where required, e.g. optional integrations)
• Legal obligation

4. Data Sharing

We share data only with:

• Infrastructure and hosting providers
• Analytics and monitoring tools
• Payment processors
• Third-party integrations explicitly enabled by you

All processors are bound by confidentiality and data-processing agreements.

5. Data Retention

We retain personal data only as long as necessary:

• Account data: while your account is active
• Logs and usage data: limited retention for security and diagnostics
• Legal or billing data: as required by law

You may request deletion at any time, subject to legal constraints.

6. Security

We implement industry-standard security measures:

• Encryption in transit and at rest
• Access controls and least-privilege principles
• Regular monitoring and auditing

No system is 100% secure, but we take security seriously.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion
• Restrict or object to processing
• Data portability
• Withdraw consent

Requests can be sent to support@invoice-grabber.com.

8. International Transfers

If data is transferred outside the EEA, we use appropriate safeguards such as standard contractual clauses.

9. Cookies

We use cookies for:

• Authentication
• Essential functionality
• Analytics (optional, where applicable)

You can control cookies via your browser settings.

10. Changes

We may update this policy from time to time. Material changes will be communicated via the Service.

11. Contact

Ekspose BV
support@invoice-grabber.com