Privacy notice

How Invocello handles data

Before publication, replace every remaining ALL-CAPS contact placeholder and obtain legal review.

Controller and contact

Moustaghni Holding AB (organisation number 559257-8073), trading as Invocello, is the controller for this service. Contact: PRIVACY@YOUR-DOMAIN. Registered address: c/o Ali Moustaghni, Hasselvägen 7, 744 50 Morgongåva, Sweden.

What we process

We process account email and authentication data, API-key hashes, subscription references, usage records, and the extracted vendor baseline needed to provide document extraction and supplier-change warnings. Raw uploads are processed transiently in application memory and are not retained by this application.

Why and for how long

We process data to perform the contract, secure the service, prevent abuse, and meet legal obligations. Operational account, vendor, and usage data remain while an account is active. After an eligible closure request, local access stops immediately and local data is erased within 30 days. Stripe retains billing records under its own terms and legal obligations.

Processors and transfers

Our current processor categories are EU-region hosting and backup storage, OpenAI for extraction, Stripe for payments, and SMTP delivery. The current subprocessor list is published at Subprocessors. We use applicable data-processing agreements and transfer safeguards before enabling each provider.

Your rights

You may request access, correction, erasure, restriction, portability, or object to processing by contacting PRIVACY@YOUR-DOMAIN. You may also complain to the Swedish Authority for Privacy Protection. For account closure, cancel active billing in Stripe first and use the signed-in account portal.

Terms · Acceptable use · Home