GDPR Information

Last updated: March 2026

Dokus is fully committed to GDPR compliance. This page outlines how we handle your data in accordance with the General Data Protection Regulation.

Data controller

Invoid Vision B.V. (registered in Belgium, KBO/BCE 0777.887.045) is the data controller for personal data collected through dokus.tech and your Dokus account. For personal data contained in financial documents uploaded by our customers, we act as a processor on the customer's instructions — the customer remains the controller.

Legal basis for processing

We process your data based on: contractual necessity (to provide the service), legitimate interest (to improve the service), and consent (for optional communications).

Data processing

Financial documents are processed to extract structured data. Processing runs on EU-hosted infrastructure, and personal data is hosted within the EEA wherever possible. Where a sub-processor operates outside the EEA (for example, Slack notifications), the transfer is covered by Standard Contractual Clauses and additional safeguards — see our Privacy Policy for details.

Data retention

We retain your data for as long as your account is active. Upon account deletion, personal data is removed within 30 days. Financial records may be retained as required by Belgian law.

Your GDPR rights

You have the right to: access your data, rectify inaccuracies, request erasure, restrict processing, data portability, and object to processing. To exercise any right, contact support@dokus.tech.

GDPR contact

For any question about how we handle your data, or to exercise your GDPR rights, email support@dokus.tech. We aim to respond within 30 days.

You can also request account deletion directly.