Privacy Policy

Last updated: 19 October 2026

In short

The website and the Chrome extension process invoices on your device. We do not collect, upload or sell your invoices or personal data. There are no accounts, advertising or analytics.

What is processed

When you upload, drop or paste something, your browser processes images, PDFs, XML files, QR text and amounts you type or select. This may include business and personal data printed on invoices. It is used only to show you the result.

What is stored on your device

Your language and theme choice (browser local storage). If — and only if — you turn on Scan history, an entry per checked invoice: seller name, VAT number, invoice date, totals and the result of the check, in your browser’s IndexedDB. History never stores images, PDFs, XML files, file names or QR text. You can delete one entry or the whole history, and clearing browser data also deletes it. Exports (CSV, Excel, PDF) are created only when you ask and are saved where you choose.

What is not collected

No analytics, advertising identifiers, fingerprinting, or third-party scripts and fonts. The website does not use cookies.

Hosting

The website is served as static files by a hosting provider. Like any web server, the provider may record standard technical logs (for example IP address and requested URL) to operate and secure the service. We do not add tracking on top of that. Each page asks the site's own server for a small public settings file (announcement, maintenance notice, support contact); that request carries nothing about you or your files, and invoice data is never part of any request because it is not sent.

Links to other sites

The result screen can link to ZATCA’s official pages. Those links open only when you click them, and those sites are governed by their own policies.

Chrome extension

The extension requests only the permissions it needs (activeTab, scripting, contextMenus), uses them only when you start a scan or choose a context-menu item, makes no network requests, and loads no remote code. See the extension’s store listing for its permission justifications.

Children

The service is not directed at children and collects no data from anyone.

Changes

If this policy changes, the new version will be published here with its date, and any online feature would require your explicit consent.

Contact

See the Support page.