Privacy Policy

Exodia ("we") takes your privacy seriously. This Privacy Policy describes what we collect, how we use it, and your rights. It applies to the Invoice Intelligence service at invoice.exodiacore.com and the Telegram bot @ExodiaInvoiceBot.

Information We Collect

We collect the following:

• Account information — your email address, name (optional), and Telegram identifier (when you use the bot).
• Content you upload — PDF invoice files you send through the bot or web portal, and the structured data extracted from them.
• Payment information — handled directly by Dodo Payments, Inc. We do not receive or store full payment card details. We receive a customer reference, billing email, and subscription status.
• Usage data — counts of invoices processed, timestamps, and error logs needed for support and quality.

How We Use Information

We use the information to:

• Provide the extraction service and deliver structured output to you
• Authenticate your access to paid features
• Send transactional emails related to your subscription
• Provide customer support and respond to questions
• Monitor service health and detect abuse
• Comply with applicable legal obligations

We do not sell your data. We do not use your uploaded invoices to train machine learning models. We do not share your data with advertisers.

Storage and Retention

Data is stored on Google Cloud Platform infrastructure (Cloud Firestore and Cloud Storage) in the europe-west1 region. Retention defaults are:

• Uploaded PDFs — retained for 90 days after upload, then deleted.
• Extracted JSON/CSV/XLSX — retained while your subscription is active, plus 30 days after cancellation.
• Account and billing records — retained for the duration required by applicable accounting and tax law (typically 5–7 years).

You may request earlier deletion of your data; see Section 05 below.

Third-Party Services

We rely on the following third-party services to deliver the Service:

• Dodo Payments, Inc. — Merchant of Record for payments and subscription billing.
• Google Cloud Platform — hosting, storage, and database (region: europe-west1).
• Telegram — for the @ExodiaInvoiceBot interface (only if you choose to use it).
• Cloudflare — DNS, CDN, and DDoS protection for our websites.

Each of these services has its own privacy policy. We have selected them with privacy and security in mind.

Your Rights

You may at any time:

• Request a copy of the data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention obligations)
• Request export of your data in a portable format
• Withdraw consent (if processing is based on consent)

To exercise these rights, email [email protected]. We respond within thirty (30) days.

Security

We use industry-standard measures to protect your data, including transport encryption (TLS 1.2+) and at-rest encryption on Google Cloud. Access to production systems is restricted to the operator. No service can guarantee absolute security, and you use the Service at your own risk.

Cookies and Tracking

The web portal uses a single session cookie (or local storage token) to keep you signed in. We do not currently use advertising trackers, cross-site tracking pixels, or third-party analytics that identify you personally.

International Transfers

Your data may be processed in Google Cloud data centres in the European Union (region: europe-west1) and incidentally in other regions where our third-party providers operate (for example, Dodo Payments and Telegram). We rely on the standard contractual safeguards offered by these providers.

Children

The Service is intended for business and professional use. It is not directed at children under 16, and we do not knowingly collect data from children.

Changes

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-product notice at least fourteen (14) days before they take effect.

Contact