Privacy notice

Who is responsible

IntuAir is a ByNeo! service operated from Ireland. Jordi Molina is the controller for account, billing, security and support data we handle for our own purposes. When a business uploads invoices for processing on its behalf, it determines why those invoices are processed. Contact IntuAir support about your data or our processing terms.

What we use and why

We use your sign-in identifier, email address, display name when provided, workspace membership and preferences to provide your account. Google sign-in provides your identity and basic profile. If you sign in with email and password, Firebase handles your password. IntuAir receives a sign-in token to establish your session.

We store your invoice files, extracted values and review edits to process and save the invoices you choose. Invoice documents may contain names, addresses, contact details, amounts or payment references. We store Airtable connection credentials and mapping selections to send reviewed fields and any mapped attachment to your selected destination. We also store a Gemini credential if you supply one.

We use service and usage records to keep IntuAir running, protect accounts, investigate errors and apply limits. For paid access we use subscription, transaction and refund details from Creem. We use your contact information and messages to respond to support and privacy requests.

Where we are the controller, we use account and service data to provide the service you request. Our legitimate interests include protecting and operating the service and resolving disputes. We keep records required for legal obligations such as accounting and responding to privacy requests.

Providers and international transfers

• Firebase Authentication handles sign-in. Google Cloud hosts the application, stores uploaded files and queues extraction. Supabase PostgreSQL stores account, workspace, invoice metadata and extracted values, and billing records.
• Google's Gemini Developer API receives the invoice file and instructions to extract header fields. IntuAir can use a managed Gemini key or the key you supply. The terms and settings of the selected Gemini account govern Google's processing, including any safety monitoring and retention.
• Airtable receives the values you save and, if you mapped an attachment field, a temporary download link for the source file. You manage saved records and attachments under your own Airtable account and terms.
• For paid subscriptions, we send your email and a workspace reference to Creem. Creem collects payment details in its checkout and acts as the merchant of record. It provides subscription and transaction details to IntuAir so we can manage your access and support requests. See Creem's privacy notice for its use of payment and buyer data.
• Google Fonts, unpkg and cdnjs serve fonts, scripts or icons to your browser. These requests send technical connection information such as your IP address to the resource provider.

Providers can process data outside Ireland and the European Economic Area, including in the United States. Where required, international transfers rely on applicable adequacy decisions or safeguards such as standard contractual clauses. You can ask support about the safeguards that apply to your data.

How long we keep data

Invoice files and extracted values are available for seven days after upload or until 24 hours after the most recent Airtable sync attempt, whichever is later. Access ends at expiry. Cleanup runs hourly and retries failed deletions. Restricted Google Cloud recovery copies of deleted files can remain for seven additional days. Database backups and provider logs follow their separate retention periods.

We keep account and workspace information while needed to provide the service. We retain billing, support and security records as needed for accounting, troubleshooting, legal requirements and unresolved disputes. Airtable copies stay in the base you control and can be removed in Airtable.

Contact IntuAir support to request account or workspace deletion. Once we verify and register the request, access to the affected data stops and cleanup removes active files and records. For a shared workspace, we check ownership before deleting it.

Cookies and browser storage

IntuAir uses cookies to maintain your session, protect forms, show status messages when needed and remember a language you choose. Firebase uses browser storage for sign-in state and to record SDK version and activity dates for service diagnostics. Google, Airtable and Creem may use their own cookies when you open their sign-in, authorization or checkout pages.

Your privacy rights

Depending on the circumstances, you can ask to access, correct, delete, restrict or receive a copy of your data, or object to certain uses. Contact IntuAir support to make a request. We may ask for information to verify it. If an invoice was supplied by a business using IntuAir, that business may need to handle the request. You can also complain to the Irish Data Protection Commission or the relevant supervisory authority.