Privacy Policy & Data Protection
1. Core Principle: German Processing Only, Zero AI Training
Valutova processes electronic invoice data (XRechnung XML and ZUGFeRD PDF/A-3) deterministically on dedicated servers in Germany. Neither the public instant checker nor the tenant cockpit forwards your invoice data to external LLMs.
2. Public Instant Checker (Ephemeral In-Memory Processing)
Files uploaded to the public instant checker without signing in are validated strictly in volatile memory (RAM) against the KoSIT ruleset and discarded immediately after returning the validation report.
3. Tenant Workspace, Inbound Email (@in.valutova.de) & GoBD Archive
For registered tenants, Valutova processes incoming e-invoices, supplier bank details (IBAN/BIC), and audit trails under a GDPR Art. 28 Data Processing Agreement to fulfill statutory retention requirements under § 14b UStG. Session management uses strictly necessary HTTP-only cookies without third-party tracking.
4. Your Rights under GDPR
You have the right to access, rectification, erasure (subject to statutory tax retention periods), and data portability at any time. Contact: [email protected].