Privacy Policy
Last updated: July 2026
Introduction
Voltract Data Utilities ("we", "us", "our") operates the Voltax service. This Privacy Policy explains what information we collect when you use our service, how we use it, and what choices you have.
What We Collect
When you create an account, we collect your name, email address, and username. When you use the service, we also handle the invoice files you upload (PDF, JPG, or PNG), your 15-digit VAT registration number, and usage data (the number of pages processed) for quota and billing purposes.
How We Use It
Your uploaded files and VAT number are used solely to extract structured invoice data using AI processing. Your account information is used to manage your account and subscription. Usage data is used to enforce your plan quota and calculate billing. We do not sell your data to any third party.
Data Retention
Invoice files and rendered page images are held in a temporary session directory on our servers and deleted automatically when you start a new batch, cancel a run, or after two hours of inactivity — whichever comes first. The structured data extracted from your invoices (supplier, amounts, invoice and VAT numbers) is also held temporarily in our database, encrypted at rest, so your results survive a server restart; it is deleted on the same triggers — new batch, cancel, or two hours of inactivity. Your account information (name, email, and usage history) is retained for as long as your account remains active. You may delete your account and all associated data at any time through the Manage Account section of the application.
Third-Party Service Providers
We work with third-party service providers to operate our service, including providers for authentication, cloud hosting, AI processing, and payment handling. These providers process your data only as necessary to deliver the service and are bound by appropriate data protection obligations. The content of your uploaded invoice files is transmitted to an AI processing provider on our behalf for data extraction. No other third party receives your invoice content.
International Data Transfers
Our servers and infrastructure are located outside the Kingdom of Saudi Arabia. By using our service, your data — including account information and uploaded files — is processed and stored on servers abroad. If your organisation has a policy requiring data to remain within the Kingdom of Saudi Arabia, this service may not meet your requirements. We apply appropriate safeguards to protect your data in transit and at rest in accordance with applicable law.
Your Rights (PDPL)
Under the Saudi Personal Data Protection Law (PDPL), you have the right to request access to, correction of, or deletion of any personal data we hold about you. To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable time.
Security
All data is transmitted over encrypted connections (HTTPS/TLS). Access to your account is protected by authentication controls. Invoice files are stored in isolated, ephemeral session storage and are not accessible across sessions. Structured invoice data held temporarily in our database is encrypted at rest.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes take effect when posted on this page. Continued use of the service after changes are posted constitutes your acceptance of the updated policy.
Contact
Questions about this policy? Write to us at [email protected].