Privacy and hosting

Your invoices contain data about you and your customers. We handle it with care.

Hosting in the EU

• EenFactuurMaken.nl runs on Hetzner servers in Germany. Our database and backups are there too.
• We send email through Resend, from their EU region in Ireland. Resend is a US company: data about sent emails (such as recipient, subject and delivery status) and the emails themselves are also processed in the US and kept there for up to 30 days.
• Payments for your subscription go through Stripe (Stripe Payments Europe, Ireland; part of the US company Stripe, Inc.).

Your account, invoices and customers are stored in the EU. For what Resend and Stripe process outside the EU, the European Commission's standard contractual clauses and, where applicable, the EU-US Data Privacy Framework apply. More in the privacy statement.

No tracking

We only use cookies that are needed to sign in and to make the site work. No advertising or tracking cookies, and no cookie banner needed. See our cookie policy.

Your customers' data

For your customers' data you are the controller and we are the processor. There's a data processing agreement for that. We only use your customers' data to create, send and store your invoices.

• The online invoice can only be seen with the secret link, isn't indexed by search engines and expires after a while.
• The free invoice generator sends nothing to our server.

Security

• Encrypted connections (HTTPS with HSTS) and a strict Content Security Policy.
• We only store passwords hashed, and we check them against known data breaches.
• Two-factor authentication and passkeys.
• We only store API keys in hashed form.
• Every sensitive action is recorded in your security log.

Read more on our Security page and in the privacy policy.

Taking your data with you or deleting it

• Download your invoices as PDF and UBL, or export everything as a ZIP.
• Fetch everything through the REST API.
• Delete your account if you want to stop.