Privacy policy

The short version

Invoice XML contents are processed inside your browser. InvoiceVeil does not upload, store or receive those files. If you buy Pro, Paddle processes the checkout and InvoiceVeil stores a transaction identifier in a secure browser cookie so it can verify access.

Invoice processing

Single-file and batch anonymization use browser APIs on your device. The source XML, detected values and generated safe copies are not sent to an InvoiceVeil server, Vercel Analytics or Paddle. Closing the tab clears the in-memory workspace; downloaded files remain wherever you save them.

Hosting and aggregate analytics

The site is hosted by Vercel. Like most hosting providers, Vercel may process technical request data such as IP address, user agent, requested path and timestamps for delivery, security and diagnostics. InvoiceVeil uses Vercel Web Analytics and Speed Insights to understand aggregate page traffic and performance. Web Analytics stores anonymized, aggregated data and does not use cookies. No invoice field values are used as analytics properties. Vercel's Hobby plan does not provide custom conversion events, so InvoiceVeil does not send tool inputs or interaction details as analytics events.

More information: Vercel Web Analytics privacy and compliance, Vercel Privacy Notice and Vercel Speed Insights.

Payments and Pro access

Paddle receives the information you enter at checkout, such as email, billing details and card data. InvoiceVeil never receives your full card number. After payment, a random Paddle transaction identifier is stored in an HTTP-only cookie for up to three years. Checkout may also include one fixed, non-personal referral label, such as iban-anonymizer, so InvoiceVeil can identify which public page or labeled checklist preceded a completed purchase. On the homepage, only the exact published invoice-checklist campaign is translated into a fixed label on the direct Pro links. Arbitrary query values are not forwarded, and no attribution cookie or browser storage is created. The label is not retained across other pages or later visits and is not proof of channel causality. It never includes an IBAN, invoice value, filename or other tool input. The transaction identifier is used only to ask Paddle whether the InvoiceVeil Pro purchase was paid. You can download that identifier as a recovery code and submit it later to restore access. Keep it private because it grants access to the licensed workspace. Clearing site data removes automatic access from that browser.

Paddle explains its processing in the Paddle Privacy Policy.

Your choices and contact

You can use the free tool without an account, decline a purchase, block analytics scripts or clear browser data. For a purchase, privacy or access request, use the merchant support contact shown during Paddle checkout or on your Paddle receipt and include the receipt number. Do not attach a real invoice.