At InvoiceSorter.app, your privacy is our top priority. We believe in complete transparency about how we handle your data. This policy explains exactly what we collect, what we don't, and where your data goes.
We never store your emails. Here's exactly what happens when you use InvoiceSorter.app:
We use read-only access to scan your inbox for invoice-related emails — Gmail (OAuth 2.0) or any IMAP mailbox. We never modify, delete, or send emails.
Our AI reads the email content in real-time and extracts only invoice metadata: vendor, amount, date, invoice number.
We store the extracted invoice data plus the sender, subject, date and attachment name of emails identified as invoices. No email bodies, no attachment files, no personal messages.
All exports go directly to your Google Drive, Google Sheets, QuickBooks, DATEV, or CSV download. We keep no copies.
Email bodies and attachment files are never stored on our servers. We store structured invoice data (vendor name, amount, date, invoice number, category) and, for emails identified as invoices, the sender, subject, date and attachment name so you can find the original. For IMAP accounts, your password is encrypted at rest with AES-256-GCM and used only to fetch new messages. All file exports go directly to your own cloud storage or accounting software. You can delete all your data from our system at any time.
InvoiceSorter.app is a product of Sport group d.o.o., a company registered in Slovenia.
Company Name
Sport group d.o.o.
Registered Address
Osojnikova 4, 2000 Maribor, Slovenia
VAT ID
SI72133449
Contact Email
privacy@invoicesorter.app
When you sign up with Google OAuth, we receive and store:
When our AI scans your inbox for invoices, we extract and store only the following structured metadata:
We collect usage metrics such as page views, feature usage frequency, and error logs to improve our service. Website analytics (Google Analytics) runs only after you accept analytics cookies, with advertising features disabled; Vercel Analytics is cookieless. Analytics never receives email or invoice data. We do not sell analytics data.
Transparency and data security are extremely important to us. We want to clearly explain how InvoiceSorter handles your data.
InvoiceSorter processes invoice emails only for the purpose of extracting invoice data and supporting your selected exports. We do not permanently store or retain your email data on our servers.
We do NOT store:
We store only extracted invoice metadata (such as vendor, amount, date, and invoice number) and your account information in our encrypted database so you can use the dashboard and your chosen exports.
When you delete an invoice from the dashboard, that invoice’s metadata is permanently removed from our database.
Invoice attachments (such as PDF invoices) may be processed temporarily to extract invoice information and complete exports. These files are not permanently stored by InvoiceSorter and are removed after processing.
If you enable Google Drive export or sync, invoices are saved directly to your own Google Drive account, where you remain the full owner and controller of your documents.
InvoiceSorter.app's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Limited access: We only request the minimum Gmail scopes needed to read email messages for invoice extraction. We request gmail.readonly scope. For export features, we request only the minimum destination scopes required (for example, Google Drive scopes when you enable Drive export).
Limited use: We only use Gmail data to extract invoice information. We do not use it for advertising, market research, or any purpose other than providing the invoice extraction service.
Limited storage: We do not store email bodies or attachment files. We retain extracted invoice data and the sender, subject, date and attachment name of invoice emails. OAuth tokens are encrypted at rest using AES-256-GCM.
No sharing: We do not sell, rent, lease, or transfer your Google user data to third parties for advertising, data brokering, or information reselling. We only share data with contracted subprocessors as needed to provide the service (for example, hosting, payments, and AI extraction).
If you connect a non-Gmail mailbox via IMAP (Outlook, Microsoft 365, iCloud, Yahoo, custom domains, etc.), we store your email password so we can fetch new messages on your behalf. We treat these credentials with the highest level of care:
Encryption at rest: Passwords are encrypted with AES-256-GCM using a per-instance master key stored in our infrastructure secrets manager. They are decrypted only at the moment a sync runs, and the plaintext is never persisted to disk or logs.
Use only for fetching: Credentials are used solely to authenticate to your IMAP server and read messages. We never modify, send, or delete email.
Recommendation: Where your provider supports them (Gmail, iCloud, Yahoo, Fastmail), use an app-specific password rather than your main account password. App passwords can be revoked individually without affecting your main login.
Deletion: Disconnecting an IMAP account from your dashboard immediately and permanently removes the encrypted credentials from our database.
We use the data we collect solely for the following purposes:
Provide the service: Extract, categorize, and display your invoice data in your dashboard.
Enable exports: Send your invoice data to your chosen destination (Google Drive, Google Sheets, QuickBooks, DATEV, or CSV download) when you enable those integrations.
Generate analytics: Show you spending insights, trends, and reports based on your own invoice data.
Account management: Manage your subscription, billing, and account preferences.
Service improvement: Improve the product using aggregated usage data (such as feature usage and error rates). Google user data is never used to develop, improve, or train AI/ML models, and is not read by humans except with your consent, for security purposes, or to comply with the law.
Communication: Send essential service notifications (e.g., billing alerts, usage limits). We do not send marketing emails without your explicit opt-in.
When you export your invoice data, it goes directly to your chosen destination. We act as a pass-through and do not retain copies of exported data after export processing completes.
Files are saved directly to your own Google Drive account.
Data is written directly to a spreadsheet in your Google account.
Invoice data is pushed directly to your QuickBooks account via their API.
Export files are generated in DATEV format and delivered to your system.
File is generated on-the-fly and downloaded directly to your device.
Invoices are formatted and downloaded directly to your device.
We implement industry-standard security practices to protect your data:
Our PostgreSQL database (Neon) encrypts all stored data at rest. OAuth tokens and IMAP passwords are additionally encrypted by the application with AES-256-GCM.
All communication uses TLS 1.3 encryption. No data is ever transmitted over unencrypted connections.
We never see or store your Google password. Authentication is handled entirely by Google's secure OAuth flow.
Your Gmail OAuth access and refresh tokens are encrypted at rest and only decrypted at the moment of use.
Our backend runs on Vercel serverless functions with no persistent servers to compromise.
We store invoice data and invoice-email metadata only. No email bodies or attachment files. Metadata of emails rejected as non-invoices is deleted after 30 days.
We use the following third-party services to operate InvoiceSorter.app:
| Service | Purpose | Data Shared |
|---|---|---|
| Google OAuth / Gmail API | Authentication & Gmail email scanning | Email address, OAuth tokens, email content (read-only, not stored) |
| IMAP servers (Outlook, iCloud, custom domains) | Email scanning for non-Gmail accounts | Encrypted password used to authenticate; email content read in real-time, not stored |
| Neon (PostgreSQL) | Database hosting | Account info, invoice data and invoice-email metadata, encrypted OAuth tokens and IMAP credentials |
| Vercel | Application hosting, serverless functions, cookieless analytics | API requests, page views |
| Anthropic (Claude) | AI invoice data extraction | Sender, subject, attachment name and text extracted from invoice attachments |
| Google Cloud (Document AI, Vision) | Invoice parsing and OCR | Invoice attachment files (processed, not retained by us) |
| Inngest | Background job processing | Job metadata; for IMAP accounts, invoice attachments in transit between processing steps |
| Upstash | Rate limiting / abuse protection | IP addresses and email addresses used for sign-in attempts |
| Resend | Transactional email (password reset, notifications) | Your email address and the message content |
| Lemon Squeezy | Payment processing | Billing details (handled by Lemon Squeezy; we never see card numbers) |
| Google Analytics | Website analytics (only with your consent) | Page views and device information; no email or invoice data |
| Dropbox (optional) | Invoice export, if you connect it | Invoice files you export |
| Telegram | Internal new-account notifications to our team | Name and email address of new accounts |
We do not share your data with advertising networks or data brokers. Slack or Telegram notifications you configure yourself are sent directly from your browser to the webhook you provide.
As a company based in the European Union (Slovenia), we are fully compliant with the General Data Protection Regulation (GDPR). Under GDPR, you have the following rights:
Right of access: You can request a copy of all personal data we hold about you at any time via your dashboard or by emailing us.
Right to rectification: You can update or correct your personal data through your account settings.
Right to erasure ("Right to be forgotten"): You can request complete deletion of your account and all associated invoice metadata. Use Settings → Delete account to immediately delete all your data and revoke our access to your Google and Dropbox accounts, or email us.
Right to data portability: You can export all your invoice data at any time via Google Drive, Google Sheets, CSV, or other supported formats.
Right to restriction of processing: You can request that we stop processing your data while maintaining your account.
Right to object: You can object to any processing of your data. Contact us at privacy@invoicesorter.app.
Right to withdraw consent: You can revoke Gmail access at any time through your Google Account settings, or disconnect any IMAP account from your dashboard (which immediately deletes the encrypted credentials). You can delete your InvoiceSorter account at any time.
Legal basis for processing: We process your data based on (a) your consent when you connect your Gmail or IMAP email account, (b) contractual necessity to provide the invoice extraction service, and (c) legitimate interest to improve our service using anonymized analytics.
Data Processing Agreements: We have DPAs in place with our sub-processors listed above. We can provide a DPA upon request for enterprise customers.
Supervisory authority: If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia (www.ip-rs.si).
| Data Type | Retention Period | Deletion |
|---|---|---|
| Account information | Until account deletion | Deleted immediately when you delete your account |
| Invoice metadata | Until account deletion | You can delete individual invoices or all data at any time |
| Google / Dropbox OAuth tokens (encrypted) | Until account deletion | Revoked and deleted when you delete your account; revoking access in your Google account makes them unusable immediately |
| IMAP credentials (encrypted) | Until you disconnect the account | Immediately deleted when you disconnect the IMAP account |
| Email bodies | Not stored | Never stored - processed in real-time only |
| Email attachments | Not stored | Never stored on our servers |
| Invoice-email metadata (sender, subject, date, attachment name) | With the invoice | Deleted with the invoice or your account |
| Metadata of emails rejected as non-invoices | 30 days | Automatically deleted after 30 days |
| Scan job records | 30 days | Access token cleared when the scan finishes; record deleted after 30 days |
| Payment information | Managed by Lemon Squeezy | Contact Lemon Squeezy or us to delete billing data |
| Usage analytics | 12 months (anonymized) | Automatically purged after 12 months |
We use essential cookies required for the service to function, and analytics cookies only if you accept them:
Session cookie: Maintains your login session. Expires when you close the browser or after 7 days.
Sign-in security cookie: Short-lived (10 minutes) value that protects Google sign-in against cross-site request forgery.
Google Analytics (optional): Only set after you accept analytics cookies in the cookie banner. Advertising features are disabled.
Language preference: Remembers your selected language. Stored in localStorage.
Billing cycle preference: Remembers your monthly/yearly toggle selection. Stored in localStorage.
We do not use advertising cookies and we do not participate in any ad networks. Analytics cookies are set only with your consent.
InvoiceSorter.app is a business tool not intended for use by children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at privacy@invoicesorter.app and we will promptly delete it.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email and/or a prominent notice on our website at least 30 days before the changes take effect. We will also update the "Last updated" date at the top of this page. Your continued use of InvoiceSorter.app after the changes become effective constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy, your data, or your rights, please contact us:
Email: privacy@invoicesorter.app
Mail: Sport group d.o.o., Osojnikova 4, 2000 Maribor, Slovenia
Response time: We aim to respond to all privacy-related inquiries within 5 business days.
InvoiceSorter.app je zasnovan z zasebnostjo na prvem mestu. Brez shranjevanja e-pošte, brez prodaje podatkov, brez sledenja.