Privacy policy

Last updated November 10, 2026.

Stillfield Works, a trade name of BMF Consulting Group LLC, Texas, USA, runs Facturpdf and is the controller for account data and the processor for your invoice data.

What we keep

How we use it

Only to build, validate, deliver and archive your e-invoices and to run your account. We do not sell or rent any data. A data processing agreement (DPA) is available on request.

Who processes it

Polar (payments), Cloudflare (hosting, storage in the EU jurisdiction), Amazon SES (sending e-invoices to your buyers, once you turn delivery on), OpenRouter, USA (once the record-fix step is on: a language model suggests fixes for broken customer records). Only the fields being fixed are sent. OpenRouter passes them to the model DeepSeek V4.1 Flash, run by an inference host that OpenRouter lists under Zero Data Retention, meaning prompts and responses are not stored after processing. We turn on OpenRouter's zero-retention setting for every request, so a host that keeps data is never used. OpenRouter does not use inputs or outputs for model training. If we change the model or provider, this page changes first.

How long

E-invoices stay in the archive as long as you are a customer, then 12 months read-only for export, then they are deleted. Order records are kept as long as tax law requires.

Your rights

You can see, correct, export or delete your data. Use the customer portal at https://polar.sh/facturpdf/portal, or email support@facturpdf.com. We answer within 30 days.