Privacy policy
Last updated: September 10, 2026
This policy explains what data Auditavi processes, why, and how you can stay in control of it.
Who processes your data
Auditavi is the trade name under which El Boukili El Hassani, El Ghali (sole trader, business number BE1032.241.237) operates. This is the data controller for the processing described on this page. The registered office address is available on request at support@auditavi.be, or publicly searchable by business number on the Belgian Crossroads Bank for Enterprises website.
What data we process
Your account and firm data (name, email, encrypted password); the information about your clients that you enter (name, VAT number, contact details); the documents you upload (cash book scans and PDFs) and the data extracted from them; billing data, handled directly by Stripe — we never store your payment details.
Why we process it
To provide the extraction and arithmetic-check service, manage your subscription and billing, provide support, secure accounts and prevent abuse. We never use your documents to train AI models.
Legal basis
Performance of our contract with you (providing the service), legitimate interest (security, product improvement), and legal obligation (invoicing, accounting).
Transfers outside the European Union
All of our technical sub-processors listed below process your data within the European Union. Stripe, our payment provider, may carry out certain additional processing outside the EU, governed by the European Commission's standard contractual clauses.
Retention and deletion
Your documents and extracted data are kept for as long as your account is active. You can delete a cash book or a client at any time: the source document and its export are then removed, with no copy kept. When you close your account, your data is deleted within a reasonable timeframe, except where a longer retention period is legally required for accounting purposes.
Your rights
You have the right to access, correct, erase, restrict, port, and object to the processing of your data. To exercise these rights, write to support@auditavi.be. You can also file a complaint with the Belgian Data Protection Authority (autoriteprotectiondonnees.be).
Cookies
We only use cookies that are strictly necessary for the service to work: sign-in session and language preference. No advertising or third-party audience-measurement cookies are set.
Security
Each firm is isolated by database-level security rules (Row Level Security): one firm can never access another firm's data. Data in transit is encrypted (HTTPS).
Changes
We may update this policy; the last-updated date appears at the top of this page. Any material change will be notified to you by email.
Contact
For any question about this policy or your data: support@auditavi.be
Technical sub-processors
| OVHcloud | Storage of uploaded documents | Gravelines, France (EU) |
| Neon | Database | Frankfurt, Germany (EU) |
| Upstash | Processing queue and cache | Frankfurt (Germany) and Dublin (Ireland), EU |
| Vercel | Application hosting | Frankfurt, Germany (EU) |
| Mistral AI | AI-based data extraction | France (EU) |
| Brevo | Transactional email delivery | France (EU) |
| Stripe | Payment processing and billing | Ireland (EU), with additional processing outside the EU under contractual safeguards |