Privacy, in plain language.

Invoices to Spreadsheets turns invoice files into spreadsheets. To do that we store the account details you give us, your workspace and projects, the files you upload, the invoice details read from them, your corrections and a record of processing. Your data is yours: we use it to run the service for you and never sell it.

Who to contact

Invoices to Spreadsheets is run from the United Kingdom. For any question about your data, or to use your rights below, email support@invoicestospreadsheets.com. We reply within one month, and usually much sooner.

How your files are processed

• Cloudflare R2 stores your original uploaded files, privately.
• OpenAI reads each document so its details can be extracted. Under OpenAI’s API terms, data sent this way is not used to train its models by default.
• Neon Postgres hosts the database with your invoice details, corrections and account records.
• Vercel hosts this website.
• Google Cloud runs the processing service in London (europe-west2).
• Clerk handles sign-in and account security.
• Resend sends sign-in codes and account emails.
• Stripe takes payments. Card details are entered on Stripe and never reach us.
• PostHog product analytics, processed in the EU.

Some of these providers process data in the United States under their own data-transfer safeguards. Each one handles your data only to provide its part of this service.

Who can see your data

Access is restricted to authenticated members of your workspace, according to the role you give them. Original documents open through short-lived signed links. Anyone you send an exported spreadsheet to can read it, so share deliberately.

How long we keep it, and deletion

We keep your data while your account is open so your projects and exports stay available, including after a trial or subscription ends. We keep the original extraction beside your corrections so every change can be traced.

When you delete something, it is deleted permanently. That covers invoices, uploads, projects, a whole workspace or your account. So that a mistaken click can be undone, deleted items can be restored for 30 days; after that they and their original files are permanently deleted from our storage and database and cannot be recovered by anyone, including us.

Cookies and similar technologies

Necessary

Always on. These keep you signed in, protect your account and remember your privacy choices. Your saved table layout stays in your own browser.

Analytics

Off until you allow it. With your permission PostHog remembers your visit across pages and return visits so we can see which pages help people. Without it we only count anonymous page views and clicks, and store nothing on your device for analytics. We do not use session replay anywhere.

Advertising

Off until you allow it. With your permission Google Ads, Meta (Facebook and Instagram) and Reddit tags tell us which of our adverts brought you here and whether you went on to create an account, so we spend less on adverts that do not help anyone. These companies may combine this with what they already know about you, under their own privacy policies.

What we never share

Invoice contents, file names, supplier names, invoice numbers, amounts and addresses are never sent to PostHog, Google, Meta or Reddit. With advertising allowed, what we share when you create an account or start a subscription is a one-way scrambled (hashed) copy of your email address — which lets an advertising platform match it to its advert without receiving the address itself — plus the plan you chose and the technical details any browser sends with a web request (IP address and browser type). Withdraw advertising consent and we stop sharing and delete what we held for it.

Your rights

You can ask for a copy of your data, have it corrected, have it deleted, object to or restrict how we use it, or take it elsewhere — every project also exports to Excel or CSV at any time. Email support@invoicestospreadsheets.com. If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk.

Our own traffic

Changes

If we change how we handle your data we will update this page first, and tell account holders by email before any change that matters.