Privacy policy

Short version: your invoices never leave your browser, there are no cookies and no third-party trackers, and the only personal data we keep is an email address you typed in yourself. The detail follows.

Your invoices are never uploaded

Validation runs entirely in your browser, in JavaScript. The file you drop is parsed locally: extracting the embedded XML from a Factur-X PDF, detecting the syntax and checking the rules all happen on your machine. The file, its name and its contents are never sent to us, stored or seen by anyone. Disconnect your network after the page loads and the validator keeps working, which is the simplest proof.

What we do collect

Email address

When you join the API waitlist. This is the only identifying data.

Optional free text

Your answer to "what are you building?", if you choose to answer.

Validation counters

The shape of each run: container (PDF or XML), syntax (UBL or CII) and whether it passed. No file, no file name, no invoice number, no identifier. It tells us which format to build first, nothing about you.

Campaign parameters

If you arrived from one of our ads, the campaign parameters in the URL (utm_source, utm_campaign, gclid) are stored alongside your signup so we know which ad works.

Audience statistics

Aggregate, cookie-less measurement: visits and pages viewed, with no individual profile and no cross-site tracking.

Why, and on what basis

One purpose: to tell you when the API opens, and to learn which formats and countries need it most. Legal basis: your consent (GDPR article 6.1.a), given when you submit the form. We do not sell, rent or share the data, and we run no targeted advertising on it.

How long

3 years from the last contact, or until you ask for deletion if that comes first.

Where it is stored

In a Cloudflare, Inc. D1 database located in the Cloudflare D1, Western Europe (WEUR) region. The host may process data in the United States; it participates in the EU-US Data Privacy Framework and offers the European Commission's standard contractual clauses.

Cookies and local storage

No cookies are set and no third-party script is loaded. One technical storage is used inside your browser and never transmitted on its own: the campaign parameters of your visit, kept for the lifetime of the browser tab only. Closing the tab removes them.

Your rights

You have the right to access, rectify, erase, port, restrict and object. Email contact@einvoicekit.com and that is enough: no form, no proof of identity beyond what is strictly necessary. We answer within one month. If our answer does not satisfy you, you can lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or with your own national authority.

Data controller

VIZALGO, 65 rue de la Croix, 92000 Nanterre, France. Nanterre Trade and Companies Register (RCS) 907 455 778. Contact: contact@einvoicekit.com.

Last updated: 4 August 2026.