Last updated: 9 November 2026
Who we are
EInvoiceFix is a service of Anneva BV, Tuinensingel 3, 3404 AW IJsselstein, Nederland. For questions about privacy, email info@anneva.nl.
Invoices you convert
Files you upload and invoices you edit are processed in memory to produce the result, and deleted as soon as the response is sent. We don't store them, use them for anything else, or use them to train models. For customers who convert their own customers' invoices, we act as their processor; a data processing agreement is available on request.
Reading PDFs
Ordinary PDF invoices, without embedded e-invoice data, are read with Microsoft Azure AI Document Intelligence in an EU data centre, for paid plans only. The analysis result is deleted from that service straight after reading, and Microsoft doesn't use it to train its models.
Account and billing details
For an account we store your email address, company name, VAT number if you enter it, language, plan, and per month how many e-invoices and PDF pages you used. Passwords are stored only as salted hashes, and API keys only as a hash. For the free plan we also count invoices per seller, using a one-way hash of the seller's VAT number, company number or name, so no business details are kept. Payments go through Stripe, which stores your payment details; we never see your full card or bank details.
Logs and cookies
Our servers keep technical logs, such as IP addresses, error reports and the delivery status of account emails, for up to 30 days to keep the service secure and working. We only use cookies the site needs to work: one that keeps you logged in, and short-lived ones that protect forms and show a message after an action. Your language choice in the converter is kept in your own browser. We don't use analytics or advertising cookies.
Who else processes data
Microsoft Azure (Microsoft Ireland Operations Ltd) hosts the service in the Netherlands and Germany, reads ordinary PDFs and sends account emails. Stripe (Stripe Payments Europe Ltd) handles payments. Cloudflare Turnstile checks on the sign-up and password forms that you're not a bot; it sees your IP address and doesn't set tracking cookies. Where these providers may access data outside the EU, this happens under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
Your rights
You can ask to see, correct or delete your data, or object to how we use it, by emailing info@anneva.nl. You can delete your account yourself under Account → Settings. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
How long we keep data
Invoices: not at all. Account details and usage counts: until you delete your account. Technical logs: up to 30 days. Payment records: as long as tax law requires, which in the Netherlands is seven years; Stripe keeps these too.