Privacy Policy

KV AI Accountant is operated by [legal entity name, company number, registered office — to be completed upon registration in Belgium]. Until that registration completes, the controller is the founder, Daniel Loverde, reachable at privacy@kvaiaccountant.com. Once the company exists this section will name it, and we will confirm whether a Data Protection Officer is required under Article 37 GDPR.

This is the part people most deserve to know before they upload anything. When you press "scan" on a receipt or invoice, the image or PDF is sent to Anthropic's API so the vendor, date, amount and VAT can be read out of it automatically. The same applies to the AI Coach, the help assistant, the AI Writer and the business plan generator: what you type into those is sent to Anthropic to produce the answer.

Anthropic acts as our processor and, under its commercial terms, does not use this content to train its models. If you would rather no document ever leave our servers, do not use the scan button — type the entry manually instead. Every scanning feature has a manual alternative, and it always will.

Your account, business data and uploaded files live in a Supabase project hosted in the European Union. Files sit in a private storage bucket that is readable only by your own account — not by other customers, and not publicly. Data is encrypted in transit (HTTPS) and at rest. The website itself runs on Vercel's global network, which means page requests may be served from outside the EU even though your data is stored inside it.

Transfers to processors outside the EU rely on the European Commission's Standard Contractual Clauses. We are working through each provider's data processing agreement as part of the legal review, and will list the concrete safeguards here when that is done. This must be verified by a qualified professional before we treat it as complete.

We use one cookie, and it is not for tracking. It remembers which country you appear to be in so the app can show the right tax rules and language before you have signed in. It contains a two-letter country code and nothing else. There is no advertising cookie, no cross-site tracking, and no third-party marketing pixel anywhere in this app.

We also use Vercel Web Analytics, which counts page views without cookies and without building a profile of you. Photographs on our homepage are served through our own domain, so no image host learns your IP address.

Under the GDPR you may see your data, correct it, take it elsewhere, restrict how it is used, object to a use, or have it erased. Two of these are buttons in the app rather than requests you have to make: Settings → Export my data downloads everything we hold about you, and Settings → Delete my account removes it. For anything else, write to privacy@kvaiaccountant.com and we will answer within one month.

If you think we have handled your data badly, you can complain to your national data protection authority — in Belgium the Gegevensbeschermingsautoriteit / Autorité de protection des données, in Sweden the Integritetsskyddsmyndigheten (IMY).

When you add a client or supplier, you are putting another person's details into our system. For that data you are the controller and we are your processor: we hold it, we do not use it for our own purposes, and we act on your instructions. You are responsible for having a lawful basis to enter it, and for telling those people about it if they ask.

We will not sell your data. We will not share it with advertisers. We will not use your documents or your business figures to train AI models. We will not read your documents out of curiosity — access to production data is limited to what is needed to keep the service running and to answer a support request you have made. If any of this ever changes, we will tell you before it does, not afterwards.

If a breach occurs that is likely to put your rights at risk, we will notify the competent supervisory authority within 72 hours as Article 33 GDPR requires, and we will tell you directly, in plain language, where Article 34 requires it. We would rather tell you about a problem early and imperfectly than late and neatly.

This service is for businesses and is not intended for anyone under 18. We do not knowingly collect data from children.

When this notice changes materially we will raise its version, date it, and tell you in the app. The most important pending change is the completion of the legal review described at the top of this page.