Privacy and cookie policy

Last updated: 16 October 2026

This translation is for information only: the Italian version is legally binding.

In short: the invoices you upload are processed in memory and are not saved. If you create an account we keep your email and the number of invoices processed, nothing of their content. We do not use profiling cookies.

Controller

Thomas Tschager, Widumacker 34, 39050 Jenesien / San Genesio Atesino (BZ), Italia, VAT no. IT03240910210. Email ten.regahcst@seciovni-e, PEC (certified email) ten.regahcst.cep@samoht.

The invoices you upload

The uploaded files (XML, .p7m and ZIP) are used only to produce the result you have chosen: the readable invoice, the attachments, the Excel file or the dashboard. They are processed in the server's memory (large files in temporary files) and discarded as soon as the result is ready: they are neither retained nor used for anything else. We record nothing of their content, not even the file names. For accounts we keep the number of invoices processed in each month; for uploads without an account only the monthly total of uploads and invoices, without any data on who made them.

The same applies if you use e-invoices.it from an artificial intelligence assistant such as ChatGPT: the server downloads the invoice you attached in the chat from the temporary address provided by the assistant, processes it in memory and returns the invoice data and its readable version to the assistant, without retaining it. What you write and attach in the chat, including the result, is processed by the provider of the assistant (OpenAI for ChatGPT) under its own terms and privacy policy.

Legal basis: performance of the service you request (Art. 6(1)(b) GDPR). Invoices often contain personal data of others, such as customers and suppliers: for these data you, or your company, are the controller, and e-invoices.it processes them on your behalf as processor, on the terms set out in the terms of service (Art. 28 GDPR).

Browsing data

To make the site work and protect it from abuse, the server records the IP address, the date and time and the page requested, including what is written in the address (for example the VAT number entered in the bulk download guide). The count of requests per IP address, used for the limits without an account, is kept in memory for at most one hour. The service logs are overwritten on rotation and kept only for as long as necessary for the operation and security of the site, and longer only if they are needed to establish an abuse.

Legal basis: the legitimate interest in the security and operation of the service (Art. 6(1)(f) GDPR).

Account

To create an account and log in, all you need is your email address: we send you a login link valid for 15 minutes. We keep the email, the creation date, the number of invoices processed per month and any credits. Expired login links are deleted together with the email address they were sent to.

Legal basis: performance of the service (Art. 6(1)(b) GDPR). The aggregate numbers are also used for internal statistics on the use of the service, which stay with us (legitimate interest, Art. 6(1)(f) GDPR). The data are kept for as long as you have the account.

Visit statistics

To know which pages are used, we count visits with Matomo, installed on our own server: the data are not shared with third parties. Matomo is configured without cookies, respects the browser's "Do Not Track" setting and records the IP address only in anonymised form, so that the data do not allow you to be identified. The data of individual visits are deleted after 180 days; only aggregate totals remain. Legal basis: the legitimate interest in improving the site (Art. 6(1)(f) GDPR).

You can object at any time (Art. 21 GDPR): turn on "Do Not Track" in your browser or use the button below, which saves your choice in the browser's local storage (it is not a cookie and is not sent to us).

Cookies

The site uses only technical cookies, necessary for the service, for which no consent is required:

• session: keeps you logged in after login, for at most 30 days or until you log out.
• download_token: for two minutes, tells the page that the requested file is ready, so that the button becomes active again.

We do not use profiling cookies or third-party cookies.

Email and PEC you send us

If you write to us, we process your address and the content of the message in order to reply to you, on the basis of your request (Art. 6(1)(b) and (f) GDPR), and we keep the correspondence for as long as necessary to handle it and to meet any legal obligations.

Who processes data on our behalf

• Hosting provider in Germany (EU): servers on which the service runs.
• Plus Five Five, Inc. (Resend, United States): sending the emails with the login link. It receives your email address and the message with the link, and keeps them with the delivery data on its servers in the United States. Your invoices never pass through Resend, and we do not track clicks in the emails. The transfer to the United States is based on the EU-US Data Privacy Framework (Art. 45 GDPR) and the standard contractual clauses of the European Commission (Art. 46 GDPR).

The data are not sold or used for advertising.

Your rights

You can request at any time access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest (Arts. 15–22 GDPR), by writing to ten.regahcst@seciovni-e. We respond within one month. You also have the right to lodge a complaint with the Garante per la protezione dei dati personali (the Italian data protection supervisory authority).

We do not make automated decisions and do not carry out profiling. Providing your email is necessary only to create an account: without it, you can use the service within the limits stated.