Privacy Policy
Your privacy matters. Here is how Peppol Validator handles your data.
What we collect
Peppol Validator does not require signup, accounts, or personal information. When you upload an XML invoice for validation, the file is processed in memory and validation results are stored temporarily so you can share result links. We do not store your invoices permanently or use them for any purpose other than returning validation results.
Analytics
We use PostHog for basic usage analytics (page views, feature usage) to improve the product. PostHog is configured with EU data residency. No personal data, invoice contents, or validation results are sent to analytics. You can block analytics by using a standard ad blocker or disabling JavaScript.
Cookies
Peppol Validator uses minimal cookies for analytics and theme preferences. No third-party advertising or tracking cookies are used.
API usage
The API at /api/v1/validate processes XML invoices without authentication. Invoice content is not logged or stored beyond the temporary result storage needed for shareable links. API requests are processed on Cloudflare Workers infrastructure in the region closest to you.
Data retention
Validation results and uploaded files are stored in Cloudflare R2 for a limited time to support shareable result links. They are not indexed, searchable, or accessible to anyone without the unique session URL.
Contact
For privacy-related questions, contact us at hello@peppolvalidator.com.