VectorInvoicePrivacy
Privacy policy
18 October 2026.
This page describes how VectorInvoice handles personal data. It describes the code and this deployment. It is not legal advice.
Who runs this service
The operator is Alexander Mauz, a self-employed person on individual activity (individuali veikla) in Lithuania, VAT-registered. The postal address, individual-activity certificate number, VAT code, email, and phone are not published on this page. The exact name on the certificate is not copied here. No data-protection officer is named. Whether one must be appointed is not decided on this page. The operator is established in Lithuania, so no Article 27 representative is named.
Controller and processor
For the account, the website, and security logs, the operator is the controller. For invoice files and fields a customer uploads, the customer is the controller and the operator is the processor under Article 28. There is no signed Article 28 contract published on this site. The downloadable text is a template. A team administrator decides processing inside that team. The host is not the employer.
What is stored
Account email, name, a password hash (Argon2id), and an optional authenticator secret. A plan name and a billing-status label. No payment-card number, and no payment company. Receipt images and extracted invoice fields. Supplier name, invoice number, amounts, buyer name, and line text are stored in the clear so the review screen can search them. VAT codes, addresses, IBANs, buyer codes, buyer emails, and the receipt file are encrypted. Team invite emails and review comments. An append-only audit log keeps the action and a count, not the email, the amount, or free text. Support can open invoices only after the customer grants access for a limited time.
Why
To run the account, show the invoices the customer uploaded, extract fields when a Mistral key is set, and prepare files the customer downloads. The application refuses an internal purpose named training. On 17 October 2026 the operator confirmed, from the Mistral admin privacy page, that the switch "use API calls to train Mistral models" is disabled and that Labs models are disabled. That training opt-out is active. Zero Data Retention has not been requested. This page does not treat it as active. A contract basis under Article 6(1)(b) is proposed for the account and stays unpublished until terms of service exist. Security logs are proposed as a legitimate interest under Article 6(1)(f). The balancing test is not published on this page.
Who receives it
Render hosts this deployment. Mistral receives a receipt, a sentence, or a short recording only when an API key is set. The European Commission VIES service and the Lithuanian open-data set at get.data.gov.lt are called when a VAT number or a company code is looked up and the lookup is not switched off. No analytics vendor and no payment vendor is connected. Customer data is not sold. The contact form stores the name, email, and message as a support ticket. A staff reply to that ticket is emailed to the address on the form.
Where it is processed
The published Render configuration sets the site, the API, Postgres, and Redis to Oregon, in the United States. An EU region is not set in that file. Render publishes a data-processing addendum that describes EU standard contractual clauses. The operator has not accepted it on this page, and whether the service moves to an EU region is not decided here. Mistral calls go to https://api.eu.mistral.ai. The code refuses the United States host, the global host api.mistral.ai, and the files and agents APIs. Mistral documents that account and billing metadata may sit outside the inference region. The training opt-out is active on the confirmation of 17 October 2026. Zero Data Retention has not been requested. This page does not treat it as active.
How long
A compressed copy of each receipt file is kept for 2 years from the document date (730 days, configurable). Extracted invoice fields and the journal stay after that file copy is deleted. Email and in-app reminders are sent 60 and 14 days before deletion, with a one-click ZIP export. Statutory bookkeeping retention is the customer's responsibility. In Lithuania that is generally 10 years; export copies you still need. This is not tax advice. Settings can also download the account data, delete stored files, delete stored records, or delete the account. Each deletion asks for the password again and a one-time email code. That code reaches an inbox only when mail sending exists. A reduced row may be kept for the retention window in the application (default 10 years): period, direction, document number, date, and amounts. Not the file, the name, the address, or the notes. That window is configuration, not a confirmed statutory period. Counsel has not confirmed the period and the fields on this page. The button does not erase provider backups, disk snapshots, database free space until unused space is reclaimed, email already sent, or the audit log.
Security
AES-256-GCM for the fields and files named above. Passwords use Argon2id. Session cookies are httpOnly except the CSRF cookie, SameSite=Strict, and Secure when the deployment turns that on. Administrators must enrol an authenticator unless the deployment turns that rule off. This deployment turns it off. This service has no backup job and no restore test. This page is not a certificate. No ISO certificate, SOC report, or penetration test is claimed.
Your rights
You can ask for access, correction, erasure, restriction, and a copy, and you can object where processing is based on legitimate interest. Where the operator is the controller, you can complain to the State Data Protection Inspectorate (VDAI) in Lithuania. Where you are the controller of invoice content, the operator acts as processor and refers the request to you. A contact email and a postal address for requests that do not use the buttons in Settings are not published on this page.
Children
The service is for people who run a business or an individual activity. It is not directed at children.
Changes
Missing details stay marked as unpublished until they are filled. The date at the top is the date of this text.