Privacy Policy — Invoice Tool

Responsible entity

LinkedWorld AG
Altrottstraße 31
69190 Walldorf
Germany
Email: info@linked-world.com

About this application

This is an internal tool used by authorized LinkedWorld AG staff to manage invoices, bank reconciliation, and related financial records. It is not a public-facing service — access is restricted to specific named accounts.

What data is processed

  • Account credentials (email + password) for the authorized users, held in the application's session system.
  • Business records: invoices, contacts, bank transactions, and related financial data, entered or uploaded by authorized users.
  • Uploaded invoice/receipt documents (PDFs), which may be sent to Google (Gemini) and/or Anthropic (Claude) for automated data extraction (invoice number, amounts, dates).
  • Basic usage/activity logs (which actions were taken, by whom, when) for internal audit purposes.

Where data is stored

  • Airtable (airtable.com) — primary data store for invoices, contacts, and bank records.
  • Vercel (vercel.com) — application hosting, and Vercel KV (Upstash Redis) for the activity log.
  • Google (Gemini API) and Anthropic (Claude API) — process uploaded PDF content transiently for data extraction; not used to train their models per each provider's API terms.

Cookies

This application only uses a strictly necessary session cookie to keep you signed in. No tracking, analytics, or advertising cookies are used, so no cookie consent banner is shown.

Legal basis

Processing is carried out under Article 6(1)(b) GDPR (performance of the employment/service relationship) and Article 6(1)(f) GDPR (legitimate interest in accurate financial recordkeeping).

Your rights

Under Articles 13, 15, 17, and 20 GDPR, you may request information about, correction of, or deletion of your personal data, or request a copy in a portable format, by contacting info@linked-world.com. You may also lodge a complaint with the Baden-Württemberg State Commissioner for Data Protection and Freedom of Information (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg).

Retention

Financial records (invoices, bank transactions) are retained in line with German statutory recordkeeping requirements (typically up to 10 years). Account/session data is retained only as long as an account remains active.

Security

Access requires authentication; connections are encrypted via HTTPS/TLS. Data is stored with the third-party processors listed above, each under their own security and data-processing terms.