← Back to the websitePrivacy Policy
Last updated: 26 October 2026
In short: we use your invoices only to provide our service to you. We do not sell your data, share it with other clients or use it for advertising. You can ask us to delete it at any time.
1. Who we are
Jumbo Automation is based in Marsalforn, Gozo, Malta (VAT MT30400314). In this policy, "we" and "us" mean Jumbo Automation. You can contact us about privacy at support@jumbo-automation.com.
2. Our role
For the invoices and documents you send us, your business is the data controller and we act as your data processor under the EU General Data Protection Regulation (GDPR). We process them only on your instructions, as set out in our data processing agreement with you.
For your own contact details as a client (name, phone, email, business details), we are the data controller.
3. What data we process
- Contact and billing details you give us: name, business name, phone, email, VAT number and address.
- The invoices, credit notes, Z-readings and other documents you send us, and the data we extract from them (suppliers, amounts, VAT, dates, payment notes and product lines).
- Messages you send us by WhatsApp, phone or email.
- If you use our Telegram assistant: the Telegram account IDs and names of the people you give access to, their questions and the assistant's answers.
Supplier invoices can contain names or contact details of people working for your suppliers. We process these only as part of the invoice.
4. Why we use it and our legal basis
- To provide the service you asked for: reading, checking, organising and returning your invoice data (performance of a contract).
- To bill you and keep our own accounting records (legal obligation).
- To answer your questions and keep the service secure (legitimate interests).
We do not use your data for advertising and we do not sell it.
5. Who helps us process it
We use a small number of trusted service providers. Each one only receives what it needs to do its job.
| Provider | What for | Where |
|---|---|---|
| Google (Google Drive) | Shared folders for your invoice files | EU and other Google data centres |
| Hetzner | Our own server that runs the automation | Finland (EU) |
| OpenAI | AI reading of invoice images and answers of the Telegram assistant. Not used to train its models. | United States |
| Airtable | Storing and checking the extracted invoice data | United States |
| Telegram | Delivering messages and files of the Telegram assistant, if you use it | Global network |
| Zoho | Our business email | EU |
| Netlify | Hosting this website | United States and global network |
Where data is transferred outside the EU, the provider is bound by safeguards approved under the GDPR, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
6. How long we keep it
We keep your invoices and extracted data while you are our client. When you leave, we give you a full copy and delete your data within 30 days, unless the law requires us to keep part of it. Our own billing records are kept for as long as Maltese law requires.
Keeping your original invoices for the legal period is your responsibility as the business owner. Your shared folder remains yours.
7. How we protect it
- A separate shared folder for each business, accessible only to you and our team.
- Encrypted connections for all files and data.
- Only the people who check your invoices can see them.
- We never ask for your email, bank or account passwords.
8. Your rights
You have the right to access, correct, delete, restrict or receive a copy of your personal data, and to object to how we use it. To use any of these rights, write to support@jumbo-automation.com. We answer within one month.
If you are not happy with how we handle your data, you can complain to the Information and Data Protection Commissioner (IDPC) in Malta.
9. This website
This website does not use cookies. We count visits with a simple counter that records only the page, the referring website and an optional campaign tag, without storing your IP address. Fonts are loaded from Google Fonts, which receives your IP address to deliver them. Links to WhatsApp open a service run by WhatsApp under its own privacy policy.
10. Changes
We may update this policy. The date at the top shows the latest version. If a change affects how we handle client data, we tell our clients before it applies.