Security & data handling
Invocello processes financial documents, so the beta explains what is retained, how access works, which providers participate, and where human review remains essential.
Current beta controls
These statements describe the implemented application behavior, not a certification or guarantee. Last reviewed 5 August 2026.
The account-free converter reads digital PDF text locally in memory and retains neither the file nor its rows. Verified-workspace files are also transient, but the configured extraction provider receives them to produce structured fields.
During the active free beta, API keys generated from the private account workspace and account-session tokens are stored only as hashes. A generated or replacement workspace key is displayed once. Dormant paid-checkout handoff code is not used by this beta and must be removed or separately reviewed before paid mode is enabled.
The seven-day browser session uses an HTTP-only, SameSite=Lax cookie that is secure in production. Invocello asks before creating it and uses no advertising or analytics cookies.
Development and production use separate ports, databases, credentials, provider modes, and processes. Local setup routes return 404 outside development.
Limits to understand
No online service can promise that every threat or document error will be detected. Invocello is an early beta and does not claim an external security audit, formal certification, or guaranteed extraction accuracy.
Transparency
The linked notices explain the provider chain, account-session choice, retained records, permitted use, and the difference between extraction and a compliance decision.
Data categories, purposes, retention, processors, transfers, and rights. Read the notice.
The named hosting, proxy, extraction, and service-email providers. View providers.
What the invoice-detail review detects and what stays with your team. See the boundary.
Rules for authorised uploads, human review, and responsible access. Read the policy.
Need another detail?
Contact support with a general question. Keep invoices, credentials, and personal data out of the message unless a secure exchange is agreed.