GDPR & Data Protection

Last updated: 3 August 2026

Who we are

SimplInvoice (“we”, “us”), operated by EXCYTECH LIMITED, Unit 13F, Maynooth Business Campus, Maynooth, Co. Kildare, W23 Y5N7, Ireland, is the data controller for the personal data processed through the service. For any data-protection question, or to exercise any of the rights below, contact us at support@simplinvoice.com.

Your rights

• Access — a copy of the personal data we hold about you.
• Rectification — correction of inaccurate data. Most fields are editable directly in the application.
• Erasure — deletion of your account and associated personal data. Contact support to request account closure and erasure.
• Portability — your invoice data in a machine-readable format. The accountant pack export on the Reports page produces CSV.
• Objection and restriction — including opting out of AI-based extraction, which can be turned off per organisation in Settings.

What we process and why

We process account details, invoice data, mailbox credentials, and billing records — as described in our Privacy Policy. The lawful bases we rely on are set out there: performance of the contract with you, compliance with legal obligations (including accounting and tax record-keeping), legitimate interests (security and service integrity), and consent where applicable.

Data transfers

Invoice content may be sent to AI providers outside the EEA depending on which provider your organisation selects. Where personal data is transferred outside the EEA, we rely on appropriate safeguards, including the European Commission's standard contractual clauses where required, and on your control over the provider choice in Settings → AI extraction. The VIES service is operated by the European Commission within the EEA.

Retention

Account and invoice data is kept while your account is active and for as long as accounting and tax record-keeping obligations require. Mailbox credentials are deleted immediately when you disconnect a mailbox. Operational logs are pruned automatically — the activity trail is retained for 90 days and audit trails for 365 days, keeping recent history per record. See the Privacy Policy for the full retention description.

Making a request

Use the contact page. We will acknowledge your request and respond within one month, as required by GDPR.

← Back to home