Sergiu Biris

How Invoflux keeps your data, bank connections, and account secure.

Security & privacy

Yes. Your data is encrypted in transit and at rest and hosted in the EU. Your bank login is never stored and bank access is read-only. Invoflux reads only what it needs from Google and never sends email as you. Your invoice files stay in your own cloud, and you can export or delete your data anytime.

Is my data secure?

Your bank login is never stored or shared with us. Bank connections are read-only and encrypted with 256-bit encryption, through a licensed, EU-regulated open banking provider. Invoflux is PSD2 compliant.

How your bank connection is protected

Invoflux requests the minimum Google permissions needed to find invoices in Gmail and file them in Drive. It never sends email from your account and never reads or changes unrelated files in your Drive. You can revoke access anytime.

What Invoflux can access in your Google account

Your data is stored encrypted and hosted in the EU. Invoices are also mirrored into your own cloud, which you control. Each company is a separate workspace with no data shared between companies, and people only see what their role allows (your accountant is read-only).

Where your data is stored and who can see it

You sign in with Google or Apple, or with a one-time magic link, so there is no password to leak. Sessions are encrypted, and only valid email addresses can create an account. Access to your workspace is controlled by roles.

How we protect your account sign-in

Invoflux handles your data under GDPR. You can access, export, and delete your data at any time. This article explains your rights and links to the full privacy policy and the deletion guides.

Your privacy and GDPR rights

You can delete your Invoflux data or your whole account from Settings under Data and privacy. Deleting removes your data from Invoflux; invoice files already mirrored to your own cloud stay in your cloud, under your control.

Delete your data or account

For the detail-minded: Invoflux encrypts data in transit and at rest, hosts in the EU, is Google CASA Tier 2 certified, runs regular independent security testing, and rotates secrets on a schedule.

Our security practices

When Invoflux fetches invoices from supplier portals, the browser extension runs in your own already-signed-in session, so no portal passwords are shared with us. Any stored portal credentials are encrypted with AES-256-GCM.

Connecting supplier portals safely

Feedback

Roadmap

Changelog

Troubleshooting & FAQ

Quick answers to the most common questions about capturing invoices, bank connections, storage, access, and billing. Each points to a full article for the details.

Frequently asked questions

Language, privacy, the mobile app, and the browser extension.

Account & settings

Invoflux is available in several languages and in light or dark mode. Set your language in Settings (saved to your account and used on every device), and switch the theme from the user menu in the top right.

Change your language and appearance

Invoflux handles your data under GDPR. You can review privacy options and delete your account from Settings under Data and privacy. Deleting your account removes your data from Invoflux; files already saved in your own cloud stay in your cloud.

Data, privacy, and deleting your account

Invoflux works on mobile web with the same features as desktop, and a browser extension helps capture invoices from supplier portals. Sign in with the same account everywhere.

Use Invoflux on mobile and with the browser extension

Plans & billing

Invoflux has Trial, Start, Business, and Enterprise plans. Your plan sets a monthly allowance for processed invoices, synced bank transactions, and AI questions, plus caps on companies, bank connections, team members, and WhatsApp numbers. Manage your plan in Settings > Billing.

Plans and what counts toward your limits

Multiple companies, team members, and your accountant.

Companies & team

Invite colleagues from the Team page and give them a role that controls what they can see and do. Roles range from Admin (full operations) to Team (Limited) (their own invoices only). Invites are sent by email.

Invite a team member

Give your accountant read-only access by inviting them from the Team page with the External Accountant role. They can view invoices, do reconciliation, and export data, but cannot edit your invoices or change settings. They do not count toward your team-member cap.

Invite your accountant

If you manage more than one company, each is a separate workspace with its own invoices, banks, and settings. Use the company switcher to move between them. Data never mixes across companies.

Switch between companies

eFactura (Romania)

Romanian companies can connect ANAF eFactura so official e-invoices sync into Invoflux automatically. Connect once by authorizing with ANAF; if the authorization later expires, you reconnect to renew it.

Connect eFactura (ANAF)

Bank reconciliation

Link your bank to Invoflux so transactions sync automatically and match to your invoices. Go to Bank, choose Connect Bank Account, pick your bank, and approve access in your bank's secure window.

Connect your bank account

Invoflux compares each bank transaction to your invoices using the amount, the supplier, and the date. Strong matches are accepted automatically; less certain ones are shown as suggestions for you to confirm.

How automatic matching works

On the Invoices page, confirm the bank match Invoflux proposes for an invoice, reject a wrong one, or match an invoice to a transaction yourself.

Review and confirm a match

If connecting your bank fails, usually at the final approval step, it is most often a consent problem on the bank's side. Revoke any existing third-party access in your bank, then connect again so a fresh approval is created.

"Bank connection failed: what to do"

Where your invoices are stored and how they are organized.

Storage & routing

Invoflux always keeps a primary copy of every invoice and can also mirror them to your own cloud: Google Drive, OneDrive, SharePoint, Dropbox, or Box. Connect one or more under Connections > Destinations > Cloud storage. Processing works even with none connected.

Connect a cloud storage provider

What Invoflux reads from invoices and how to correct it.

Extraction & your data

Invoice details are shown as Invoflux read them. If something is wrong or an email was skipped, you can rescan a skipped email (up to twice) or re-upload the file to reprocess it. For corrections that reprocessing does not fix, contact support.

Fix an incorrectly extracted or skipped invoice

How invoices reach Invoflux: Gmail, email, upload, and portals.

Capturing invoices

After you connect Gmail, Invoflux scans your inbox for invoices, processes the ones it finds, and keeps watching for new ones. It only acts on messages that look like invoices and never sends email on your behalf.

How Gmail scanning works

Add an invoice yourself by uploading the file. Invoflux reads and files it just like an emailed one. Useful for paper invoices you scanned or files saved outside your inbox.

Upload an invoice manually

"Needs review" means Invoflux processed the invoice but was not fully confident about one or more fields, so it is asking you to check before the invoice is treated as final. Open it, confirm or correct the fields, and save.

What "Needs review" means

Every workspace has a unique Invoflux email address. Forward any invoice to it (or set suppliers to send there) and it is captured, read, and filed like any other invoice. Useful for invoices that do not land in your connected inbox.

Forward invoices to your magic email

Set up Invoflux and process your first invoice.

Getting started

Pick the root Google Drive folder where invoices are filed during onboarding, and let Invoflux route each invoice automatically. You can change the root folder later under Connections > Google Drive.

Choose your Drive folder and routing

During onboarding, connect Google once to give Invoflux access to read invoices from Gmail and file them in Google Drive. Both are granted in a single Google consent screen.

Connect your Google account (Gmail and Drive)

Invoflux automates invoice admin: it reads invoices from your email, extracts the details, files them in your cloud storage, and matches them to your bank transactions. You connect Google once, and it runs in the background.

What is Invoflux and how it works

After you connect Google, Invoflux scans your inbox and processes recent invoices. Open the Invoices list to see them, click one to view its extracted fields, and review anything marked Needs review.

See your first processed invoice

Connect Claude, ChatGPT, Cursor, and other AI assistants to Invoflux and ask about your invoices, spending, and missing documents.