Privacy Policy

Last updated: October 5, 2026

This Privacy Policy explains how TTP GO LTD (“TTP GO”, “we”, “us”, or “our”) collects, uses, stores, and protects personal data when you use InvoLoops (the “Service”). The Service is a platform for managing a business’s documents and money: receiving and extracting data from expense invoices, issuing tax invoices, receipts and other documents (including allocation numbers from the Israel Tax Authority), and reporting on income, expenses and VAT. It also shows sponsored offers from partner businesses (see Sections 3 and 7).

We are committed to protecting your privacy and handling your data in accordance with the Israeli Protection of Privacy Law, 5741-1981 and its regulations, and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Who We Are (Data Controller)

The data controller responsible for your personal data is TTP GO LTD, an Israeli private limited company. For any privacy-related inquiries, requests, or complaints, please contact us at [email protected].

Under the Israeli Protection of Privacy Law, TTP GO is the owner of the database (“בעל המאגר”) for the data about you as a user of the Service: your account, billing and usage. The documents and records you enter about your own customers and suppliers belong to your business: for that data you are the owner, and we hold and process it on your behalf and on your instructions (“מחזיק”).

2. Information We Collect

We collect the following categories of information:

2.1 Account Information

Full name
Email address
Password (stored only as a salted bcrypt hash; we never see or store your plaintext password)
Profile image (if provided)
Account creation and email verification timestamps

2.2 Business Details

The details of your business that appear on the documents you issue: legal name, business type, VAT or company registration number, address, phone, email, logo, and document settings.

2.3 Invoice and Customer Data

When you upload invoices or other documents, we collect and store the files themselves and the data contained within them, which may include:

Invoice files (PDF, PNG, JPEG, WebP, TIFF)
Vendor and supplier names, aliases, and categories
Invoice numbers, dates, amounts, currency, VAT amounts, and descriptions
Extracted text, extraction method, and confidence scores
Review notes, approval status, and rejection reasons
A cryptographic hash (SHA-256) of each uploaded file, used to detect duplicates
Documents you issue (tax invoices, receipts, credit invoices and others): their contents, amounts, dates, allocation numbers and status
Your customers’ details: names, VAT or ID numbers, email addresses, phone numbers and addresses

Because invoices are business records, they contain personal data about third parties (for example vendor contacts and your customers). You are responsible for ensuring you have the legal right to enter such data into the Service.

2.4 Usage and Technical Data

Session cookies required for authentication
Audit logs of actions you take in the Service (e.g., approving, rejecting, updating, or deleting invoices)
Server logs (IP address, browser type, timestamps) used for security and debugging
Aggregated analytics and product usage data collected through the third-party tools described in Section 13 (Cookies, Analytics & Tracking), subject to your consent choices

2.5 Email Forwarding Service

When you create an account, the Service generates a unique email address for your use. Invoices and documents you forward to this address are automatically received and processed by our servers. To protect against spoofing, we verify DKIM signatures on incoming emails; messages that fail cryptographic sender verification are rejected. We collect and store the email message metadata (sender address, subject line, timestamps), file attachments, and extracted invoice data. Duplicate messages are automatically detected and ignored. You are responsible for ensuring that any third-party information contained in forwarded emails is shared lawfully.

The mailbox that receives these emails is operated by us on Google Workspace (Gmail), so Google processes the forwarded messages as our service provider.

2.6 API Keys and Connected Apps

If you choose to provide your own API key for AI extraction services, we encrypt the key at rest using industry-standard encryption. The key is decrypted only momentarily when making requests on your behalf and is never logged, displayed in full, or shared. You may remove your API key at any time, and removal takes effect immediately.

If you create InvoLoops API keys or register webhooks, we store the key or signing secret only in hashed form, together with the permissions you granted, the addresses you registered, when and from which IP address a key was last used, and a log of webhook deliveries. If you connect an app through our MCP server, we store the access you granted it and the tokens issued to it. Data you direct us to send to a webhook or connected app is sent at your instruction.

2.7 Payment Information

If you subscribe to a paid plan, payment processing is handled by Stripe, Inc. We do not store your full credit card number. Stripe’s use of your payment data is governed by Stripe’s privacy policy (https://stripe.com/privacy). We receive from Stripe only the information necessary to manage your subscription, such as payment status, last four digits of your card, and billing cycle dates.

2.8 Reverse-Charge Consent (Your Customers’ Signatures)

When a user asks one of their customers to agree to a reverse-charge invoice, the customer receives a link and signs on a page of the Service. We record the signer’s name, role (if given), drawn signature, the time, their IP address and browser, the email address the link was sent to, and the text they agreed to. The purpose is to keep evidence of the consent the VAT rules require for a reverse-charge invoice. The record belongs to the user who requested it and is kept with that invoice for as long as tax law requires the invoice to be kept (at least 7 years from the end of the tax year). A signer may ask that user, or us, to see or correct it.

2.9 Team Members and Accountants

If you invite someone to your account, we store their email address, the permissions you gave them, and a record of the actions they take in your account.

2.10 Sponsored Offers

We record which sponsored offers were shown to you, which you hid, and which you asked to be contacted about. When you ask to be contacted, we keep a copy of exactly the details you agreed to share with that partner, as a record of your consent.

2.11 Is Providing This Information Required?

No law requires you to give us personal data. Without account information we cannot open an account, and without the details a tax document must carry (for example, a customer’s name and, above the allocation threshold, their VAT number) the Service cannot issue that document.

3. How We Use Your Data

We process your personal data for the following purposes:

To create and manage your account and authenticate you
To provide the core Service: storing, organizing, extracting, and displaying invoice data
To automatically extract structured data from uploaded documents using text parsing and AI-based vision models (see Section 5)
To detect duplicate uploads via file hashing
To maintain audit trails for accounting and compliance
To secure the Service, prevent abuse, and troubleshoot issues
To show sponsored offers from partner businesses (such as accountants, banks, insurers or financing providers). Some offers are shown to all users. Others we choose from figures in your account, for example unpaid invoices, VAT due, revenue so far this year, your business type, or whether an accountant is connected. This matching runs on our servers; partners do not see your account or these figures.
To send you emails about your account and the Service, and, if you agreed to receive them, marketing emails (you can unsubscribe at any time)
To comply with legal obligations under Israeli and, where applicable, EU law

4. Legal Basis for Processing (GDPR)

Where GDPR applies, we rely on the following legal bases:

Contract: processing necessary to provide the Service you signed up for.
Legitimate interests: securing the Service, preventing fraud, improving functionality, and choosing which sponsored offer to show you (which you can object to, see Section 10).
Legal obligation: where we must retain or disclose data under applicable law.
Consent: where you have explicitly consented, such as marketing emails, optional cookies, and sharing your details with a sponsored partner (you may withdraw consent at any time).

5. Automated Data Extraction

To extract fields such as vendor, date, and amount from your uploaded documents, the Service uses a combination of text-based parsing and, as a fallback for scanned or image-based documents, a third-party AI-powered vision model. When vision-based extraction is used, the contents of the relevant document are transmitted to the AI provider solely for the purpose of extracting structured data, and are not used by us or the provider to train public models. No decisions with legal or similarly significant effects are made about you based solely on automated processing.

AI extraction is currently provided by Anthropic, PBC (Claude), San Francisco, USA. If you supply your own Anthropic API key, the request is made under your own account with Anthropic. We will update this Policy before using another provider.

The provider processes document data solely for extraction purposes. We maintain a Data Processing Agreement or equivalent contractual safeguards with it. Where your data is transferred to providers located outside the European Economic Area, such transfers are made subject to appropriate safeguards as described in Section 6.

6. Where Your Data Is Stored

Account data, invoice data, vendors, uploaded files and audit logs are stored on a server we rent from OVHcloud, in its data centre in Canada. TTP GO LTD administers the server; the database and the file storage both run on it, and data is logically isolated per account.

Keeping the data in Canada is a transfer of data outside Israel. We make it under the Protection of Privacy (Transfer of Data to Databases Abroad) Regulations, 5761-2001: Canada is a country to which personal data may be transferred from the European Union, and the European Commission recognises it as providing an adequate level of protection — which is also the basis for EU residents’ data.

Connections to the Israel Tax Authority, for allocation numbers, pass through a server of ours in Israel. Other providers listed in section 7 process the data they receive where they operate. If we move where your data is stored, we will update this Policy first.

7. Data Sharing and Disclosure

We may share data only with:

Service providers (processors) acting on our behalf, such as hosting, database, object storage, and AI extraction providers, each bound by confidentiality and data protection obligations.
Legal and regulatory authorities where required by Israeli law, court order, or valid legal process.
The Israel Tax Authority: when you issue a tax invoice that needs an allocation number, the invoice’s details (including your customer’s VAT number and the amounts) are sent to the Tax Authority, as VAT law requires. Reports you choose to produce (such as the uniform-structure export or the PCN874 file) are files you submit yourself.
Email delivery (Amazon Web Services — Amazon SES) for sending invoices, signature requests and account emails: the recipient’s address and the message.
Google (Google Workspace), which operates the mailbox that receives emails you forward to your InvoLoops address, as our service provider.
Sponsored partners, only when you ask to be contacted about one of their offers. Before anything is sent, we show you the exact details the partner will receive (for example your name, email, phone number, business name, or the total of your unpaid invoices), and nothing is sent unless you confirm. We keep a record of what you agreed to share. After that, the partner handles those details under its own privacy policy.
People and apps you give access to: team members and accountants you invite see your account within the permissions you grant, and apps you connect through API keys, webhooks or our MCP server receive the data you authorise.
Successors in connection with a merger, acquisition, or sale of assets, subject to this Policy.
Payment processor (Stripe, Inc.) for subscription billing, bound by their Data Processing Agreement.
AI extraction provider (Anthropic) for automated document processing, bound by a Data Processing Agreement or equivalent contractual safeguards.

8. Data Retention

We retain your data according to the following schedule:

Account information is retained for as long as your account remains active, and deleted within 30 days of account closure, unless longer retention is required by law.

Invoice data and uploaded files are retained for as long as your account remains active. Upon account deletion, invoice data is deleted within 30 days, except where we are required to retain records for tax or accounting purposes under Israeli law (typically 7 years from the end of the relevant tax year).

Server logs are retained for up to 12 months for security and debugging purposes.

Audit logs are retained for as long as your account is active plus 7 years, to comply with accounting record-keeping requirements.

Records of sponsored offers shown, hidden and confirmed, including the copy of details you agreed to share, are kept while your account is active and deleted with it.

You may request deletion of your account and associated data at any time by contacting us at [email protected]. We will process deletion requests within 30 days, subject to any legal retention obligations.

9. Security

9.1 Technical and organizational measures

We implement technical and organizational measures designed to protect your data, including encryption in transit (HTTPS), bcrypt password hashing, server-side session validation, per-user data isolation, parameterized database queries, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Additionally, login attempts and password reset requests are rate-limited to prevent brute-force attacks. Password reset links are single-use, cryptographically random, and expire within one hour.

Your identity is re-verified on every request using a signed session token. Changes to your account status (such as role changes or access revocation) take effect immediately.

9.2 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority (the Israeli Privacy Protection Authority or, where applicable, an EU data protection authority) within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to you, we will also notify you directly without undue delay, providing information about the nature of the breach and steps you can take to protect yourself.

10. Your Rights

Under the Israeli Protection of Privacy Law you may review the data about you held in our database (section 13) and ask us to correct or delete data that is wrong, incomplete, unclear or out of date (section 14). Subject to applicable law, you also have the right to:

Access the personal data we hold about you
Request correction of inaccurate or incomplete data
Request deletion (“right to be forgotten”) of your data
Restrict or object to certain processing
Request portability of your data in a machine-readable format
Withdraw consent where processing is based on consent
Object to your data being used to choose sponsored offers for you. You can hide any single offer, or turn off “Use my figures to choose offers” in Settings → Data. We then stop using your data to choose offers, and you see only offers shown to all users.
Lodge a complaint with the Israeli Privacy Protection Authority or, if you are in the EU, your local data protection authority

To exercise any of these rights, contact [email protected]. We will respond within the timeframes required by applicable law.

11. Children

The Service is intended solely for users who are 18 years of age or older. We do not knowingly collect personal data from children under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.

12. Business Use

The Service is designed for business and professional use. If you use the Service on behalf of a company or organization, you represent that you have authority to bind that entity to this Privacy Policy and our Terms of Service.

13. Cookies, Analytics & Tracking

The Service uses cookies and similar technologies in three categories:

Strictly necessary cookies. Required for core functionality such as authentication, session management, security, and remembering your cookie preferences. These are always on and do not require your consent.
Analytics cookies (optional, consent-based). Used to understand how users interact with the Service so we can improve it. These are loaded only if you grant consent via our cookie banner.
Advertising cookies (optional, consent-based). Used to measure and run our own advertising on other sites, as described in Section 13.1. These are separate from the sponsored offers shown inside the Service, which use no cookies.

13.1 Consent Categories and Google Consent Mode v2

Our cookie banner exposes three categories:

Strictly necessary — always on.
Analytics — off by default; when you opt in, tools such as Google Analytics and Microsoft Clarity are loaded through Google Tag Manager.
Advertising — off by default; when you opt in, tools such as the Meta (Facebook) Pixel and Google Ads conversion tags are loaded through Google Tag Manager for conversion measurement, audience building, and retargeting.

We implement Google’s Consent Mode v2. By default, analytics_storage, ad_storage, ad_user_data, and ad_personalization are set to denied until you make a choice in our cookie banner. Only functionality_storage and security_storage are granted by default, as they are strictly necessary. Your choices in the Analytics and Advertising categories directly control which of these signals are updated to granted.

13.2 Third-Party Analytics and Tag Management Tools

Subject to your consent, the Service may load the following third-party tools:

Google Tag Manager (GTM). Provided by Google Ireland Limited. GTM is a tag container used to deploy and manage tags; it does not set tracking cookies on its own but can load other tags (such as Google Analytics) based on your consent choices.
Google Analytics 4 (GA4). Provided by Google Ireland Limited. Used to collect aggregated usage statistics such as page views, session duration, device type, approximate geolocation (based on IP), and interactions with the Service. GA4 sets cookies such as _ga, _gid, and _gat, which are automatically cleared if you withdraw analytics consent. IP addresses are truncated/anonymized where supported.
Microsoft Clarity. Provided by Microsoft Corporation. Used to understand how users interact with the Service through aggregated metrics, heatmaps, and session replays. Clarity may record interactions such as mouse movements, clicks, scrolls, and page navigation. We configure Clarity to mask sensitive input fields by default, but you should avoid entering highly sensitive personal data into fields that are not clearly required.
Meta (Facebook) Pixel. Provided by Meta Platforms Ireland Ltd. Used, subject to your consent, for conversion measurement, audience building, and retargeting advertising on Facebook, Instagram, and other Meta properties. The Meta Pixel may set cookies such as _fbp and fr, and may transmit events (such as page views, sign-ups, or other interactions) to Meta. Meta is a joint controller with us for certain pixel-collected data under the Meta Controller Addendum.
Additional tags (future integrations).We may, from time to time, add further measurement, analytics, error-monitoring, advertising, or marketing tags through GTM. Any such tag will only be loaded under an existing consent category you have already approved (for example, an additional analytics provider under the “analytics” category). We will update this Policy to name the specific provider when we add a tag that: (i) introduces a new consent category; (ii) materially changes the scope of data collected; or (iii) transfers data to a new jurisdiction or recipient not already listed here. Minor additions within an existing category may be reflected only in a future revision of this Policy.

These providers act as independent or joint data controllers for the data they collect through their own tools. Their use of data is governed by their own privacy policies:

Google: https://policies.google.com/privacy
Microsoft Clarity: https://privacy.microsoft.com/privacystatement
Meta (Facebook): https://www.facebook.com/privacy/policy/

13.3 International Transfers

Google, Microsoft, and Meta may process data outside the European Economic Area and Israel, including in the United States. Where such transfers involve personal data of EU or Israeli residents, they are made subject to appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and Israeli Privacy Protection Regulations (Transfer of Data to Databases Abroad), 5761-2001.

13.4 Managing Your Choices

You can accept, reject, or customize your cookie preferences at any time via the cookie banner and the “Preferences” link it provides. Rejecting analytics cookies will not affect your ability to use the core features of the Service. You can also block or delete cookies directly in your browser settings.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by email. The “Last updated” date at the top reflects the latest revision.

15. Contact

TTP GO LTD
Email: [email protected]