Privacy policy

Muntelo is a product of Invix Digital. This policy explains which personal data we process when you visit this website or use Muntelo, why we do so and what your rights are.

Who we are

Invix Digital is the controller of your personal data.

• Company: Invix Digital
• Chamber of Commerce (KvK) number: 92610927
• Address: Postekampke 14, 5221 BL Den Bosch, the Netherlands
• Email: info@invixdigital.com

This website

On muntelo.nl we measure how the site is used, so we can improve it. We do this with PostHog, whose servers are in the EU.

• Without cookies (the default). We see which pages are viewed, how visitors arrive (for example through a search engine or a link), which device and language they use and what they click. Visits are counted with a code that PostHog computes on its own servers from, among other things, your IP address and browser. That code changes every day and is not stored in your browser. No cookie is set, nothing is stored in your browser and your IP address is not kept.
• With your consent. If you choose "Sure" in the cookie notice, PostHog sets a cookie on muntelo.nl (valid for a year) and keeps data in your browser's storage, so we can link your visits. We then also see which country you visit from; we derive that from your IP address, which is then discarded. We also record your visit (session replay) to see where the site is unclear. Anything you type in forms is masked. Recordings are kept for 30 days.

We remember your choice in your browser. You can change it at any time through "Cookie settings" at the bottom of every page. Don't want to be counted without cookies either? Turn on "Do Not Track" in your browser, or email us. We keep statistics for as long as we need them to improve the site. We use no advertising cookies or ad-network trackers.

Our hosting provider also processes technical data, such as your IP address, to deliver and protect the site.

What we process in the app

• Account details: your name, email address and sign-in details, such as your passkey or two-factor settings.
• Business details: your business name, address, KvK and VAT numbers, IBAN and logo.
• Your records: your clients and suppliers, invoices, quotes, receipts, bank transactions, hours and trips.
• Billing details: information about your subscription and payments. We never handle card details ourselves; our payment partner does.
• Usage and security: technical logs, such as sign-in attempts, to prevent abuse and fix problems.

Why we use it

• to provide your account and the app (performance of a contract);
• to bill your subscription (performance of a contract);
• to keep your records and prepare the returns that you file (performance of a contract);
• to secure the app and prevent abuse (legitimate interest);
• to measure how the website is used without cookies (legitimate interest), and with cookies and recordings if you consent (consent);
• to tell you about important changes, such as price changes (performance of a contract).

We never sell your data and never use it for advertising.

The assistant and AI

The assistant uses an AI model from OpenAI. We only send what your question needs, and ask OpenAI not to store it. Your data is never used to train AI models. The assistant's suggestions, such as a category or VAT rate, are only applied once you confirm them.

Where your data is stored

Your data and documents are stored in data centres inside the European Union. Some providers, such as OpenAI and Stripe, may also process data outside the EU. They only do so with appropriate safeguards, such as the European Commission's standard contractual clauses.

Who we share data with

We work with processors who handle data on our behalf, under a data processing agreement:

• Cloudflare: hosting, storage and sending email.
• Stripe: subscription payments, and payment links if you turn them on.
• OpenAI: the assistant.
• PostHog: website statistics and, with your consent, recordings of your visit.
• Bank feed and e-invoicing (Peppol) providers: only if you use those features.

We also check KvK and VAT numbers with the Chamber of Commerce and the EU's VIES service. Your tax returns only go to the Belastingdienst when you file them.

How long we keep it

For as long as your account exists. Dutch law requires you to keep your records for 7 years (10 for real estate). If you leave Muntelo, you can export everything for free. After that we delete your data, unless the law requires us to keep it longer.

Your rights

You can access, correct, delete or take your data to another service. You can also object to or restrict processing. Email info@invixdigital.com and we'll respond within a month. If you're unhappy with how we handle your data, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Security

All connections are encrypted. Every business has its own walled-off workspace. You can sign in with a passkey or turn on two-factor authentication.

Changes

If we change this policy, the new date appears at the top. We'll tell you in advance about important changes.