Privacy policy
Last updated: 23 September 2026
KSeF Invoice Studio runs in your browser. There are no user accounts and no database, and invoice data doesn't reach our servers — except in the cases described below.
Data controller
The data controller is RACCOON SOFTWARE Bartłomiej Zimny, ul. Zawale 21B, 38-100 Strzyżów, Poland, tax ID (NIP) 8191654690, REGON 382663820.
Contact for personal data matters: bartlomiejzimny@outlook.com.
Data stored in your browser
Your seller details, saved clients, line items, chosen mode and AI agent settings are kept only in your browser's local storage. We can't access them. You can remove them by clearing this site's data in your browser settings.
XML and PDF files are created on your device and saved wherever you download them.
AI agent
When you use the AI agent, your brief, any attached XML files and photos, and company lookup results are sent through our server function to the Anthropic PBC API (Claude model) to generate the invoice. We do not store this data. Anthropic processes it under its own privacy policy.
Legal basis: Article 6(1)(b) GDPR (providing the service you request). Don't give the agent data you don't need on the invoice.
Company lookup by NIP
When you look up a business, its tax ID (NIP) is sent to the BIR1.1 service of Statistics Poland (GUS), through our server function, and to the Ministry of Finance's VAT taxpayer register (White List) API. We send only the NIP; the returned details come from public registers.
Hosting and technical logs
The site and server functions run on Vercel Inc. infrastructure. Each request may produce technical logs (such as IP address, date and time, page URL and browser type) needed to run and secure the service. Legal basis: Article 6(1)(f) GDPR (legitimate interest).
TODO: confirm the log retention period in the Vercel project settings.
Cookies and analytics
We don't use cookies or any analytics or advertising tools. The app only uses the local storage described above.
Transfers outside the EEA
Anthropic PBC and Vercel Inc. are based in the United States, so data sent to them may be processed outside the European Economic Area.
TODO: state the transfer mechanism (e.g. the EU–US Data Privacy Framework or standard contractual clauses) once the provider agreements have been checked.
Client data on your invoices
You act as the controller of the buyer and other personal data you put on invoices. By using the AI agent or the NIP lookup, you decide to pass that data to the services described above.
Your rights
You have the right to access, rectify and erase your data, to restrict its processing, to data portability and to object. You can also lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.
Because we don't store invoice data, you can delete most of it yourself by clearing the site data in your browser. For anything else, email the address above.
Changes to this policy
If we change how we process data, we will update this page and the date at the top.