Yes. Without an account you can parse 2 invoices a month. Sign in for free and you get 30 invoices a month, batch upload of up to 10 files, upload history and Excel, XML and NAP export. No credit card needed.

Yes, we use bank-level encryption and are GDPR compliant. Your invoices are never stored permanently.

What counts as a parse?

Each PDF invoice you upload and process counts as one parse. Failed uploads don't count against your limit.

Can invoices be processed automatically, inside our own systems?

Yes, that is what auwo builds: custom connections that handle every invoice on their own. See auwo.ai.

Privacy Policy

Last updated: October 25, 2026

This policy explains what personal data we process when you use the free invoice-reading tool auwo invoices at invoices.auwo.ai (the “Service”), why, how long we keep it, and your rights under Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.

1. Controller

The controller is Vaklin Stoynovski (natural person), Burgas, Bulgaria, trading under the auwo brand. Contact for questions and to exercise your rights: audit@auwo.ai. We have not appointed a data protection officer, as one is not required for our type and scale of processing (Art. 37 GDPR).

2. What data we process

Uploaded documents and the data read from them. The PDF file (up to 5 MB) and the fields and line items the Service extracts. Invoices often contain personal data: names, addresses, phone numbers, emails, bank accounts.
Account (only if you sign in). Email, name and, with Google sign-in, profile picture.
Company details (only if you enter them) for the NAP export: company name, company ID (EIK), VAT number.
Technical data. IP address (for usage limits and abuse protection), browser and device type, technical logs and error reports.
Preferences. Language and theme, stored only in your browser (localStorage).

3. Purposes and legal bases

Reading the invoice and showing and exporting the result, including history and share links when you use them. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Usage limits, security and abuse protection. Legal basis: legitimate interest (Art. 6(1)(f)) in keeping the Service free and available.
Fixing errors (technical logs, error reports without personal data by default). Legal basis: legitimate interest.
Aggregate visit statistics (Vercel Web Analytics, cookieless, no individual visitor profiles). Legal basis: legitimate interest.

We do not use the content of your invoices for advertising, we do not sell it, and we make no automated decisions with legal effects on you.

4. How the reading works

Your invoice is sent to the Google Gemini API (Google’s paid service), which reads it and returns structured data. Under Google’s terms for its paid APIs, Google does not use the submitted content to train or improve its models. The original file is not written to our servers: it is processed in memory and discarded right after reading.

5. How long we keep data

The original PDF: not stored.
The result of a single upload: up to 24 hours, then deleted automatically.
History (accounts only): your last 50 invoices, until you delete them on the History page or delete your account.
Share links: 30 days after creation, then they expire automatically.
Usage-limit counters (per IP or account): until the end of the month plus one day.
Account and company details: until you delete your account.
Technical logs: briefly, typically up to 30 days.

6. Recipients and processors

These providers process data on our behalf, under contract and only on our instructions:

Vercel Inc.: hosting the Service and the aggregate statistics.
Google Ireland Limited / Google LLC: reading documents (Gemini API).
Upstash Inc.: temporary storage of results, history, share links and usage limits.
Clerk Inc.: accounts and sign-in.
Functional Software Inc. (Sentry): technical error reports.

These providers may process data in the United States. Transfers are protected by GDPR safeguards: certification under the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

7. Security

Encryption in transit (HTTPS/TLS).
No permanent storage of uploaded files.
Restricted access and automatic expiry of temporary data.
Protection of downloaded Excel files against injected formulas.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. You can delete your history and account yourself; for everything else write to audit@auwo.ai. We reply within one month.

You may lodge a complaint with the Bulgarian Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg, or with the supervisory authority where you live.

9. Changes

We may update this policy. The current version and its date are always on this page.