1. Introduction
INFIVEX Global PTE Ltd ("we", "us", "our") operates SLinkHub platform accessible at slinkhub.net. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use SLinkHub.
We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Belgian and European data protection laws.
2. Data Controller
The data controller for SLinkHub platform is:
INFIVEX Global PTE Ltd
7 Temasek Boulevard #12-07 Suntec Tower One
Singapore
Email: privacy@infivex.com
3. Data We Collect
Account Data
- Name, email address, phone number
- Company name, VAT number, address
- Login credentials (passwords are hashed, never stored in plaintext)
- Two-factor authentication setup data
Invoice Data
- Invoice content: numbers, dates, amounts, line items, tax information
- Vendor and customer contact details
- PDF attachments and documents
- Payment records
- Peppol delivery status and audit trails
Technical Data
- IP address, browser type, device information
- Usage logs and access timestamps
- API key usage and access patterns
4. How We Use Your Data
We process your data for the following purposes:
- Service delivery: Processing, sending, and receiving invoices via Peppol
- AI processing: Extracting invoice data from PDFs using AI (Anthropic Claude). Invoice content is sent to the AI provider for processing and is not stored by the AI provider beyond the request.
- Tax compliance: DGFIP reporting for French companies, VIES VAT validation
- Account management: User authentication, authorization, and access control
- Communication: Service notifications, password resets, system updates
- Security: Fraud prevention, audit logging, abuse detection
5. Legal Basis for Processing
- Contract performance: Processing necessary to provide SLinkHub service (Art. 6(1)(b) GDPR)
- Legal obligation: Tax reporting and e-invoicing compliance (Art. 6(1)(c) GDPR)
- Legitimate interest: Security, fraud prevention, service improvement (Art. 6(1)(f) GDPR)
6. Data Sharing
We share data with the following categories of recipients:
- B2Brouter: Invoice data transmitted via the Peppol network for e-invoicing delivery
- Anthropic (Claude AI): Invoice PDF content processed for data extraction. Data is not retained by Anthropic beyond the API request.
- Microsoft Azure: Cloud infrastructure provider (data hosting, storage, compute)
- Tax authorities: DGFIP reporting for French companies (when activated)
We do not sell your personal data to third parties.
7. The Business Central Extension
SLinkHub is also published on Microsoft AppSource as a set of extensions for Microsoft Dynamics 365 Business Central. Installed in your own Business Central environment, they add two data flows on top of the platform described above.
- Document transmission: sales and purchase document data (parties, amounts, lines, tax, and the rendered invoice PDF) is sent over HTTPS from your Business Central environment to SLinkHub platform, which delivers it to the trading partner you address. Incoming supplier documents travel the same route in reverse. Nothing is transmitted until you enter your credentials and enable the flow.
- Diagnostic telemetry: the extensions emit operational telemetry to INFIVEX through Microsoft Azure Application Insights (West Europe) - environment and extension identifiers, event names, timings, and error text - so transmission failures can be diagnosed. It carries no document content and no contact details.
- Document viewer: the optional in-client PDF viewer loads a viewer application hosted by INFIVEX on Microsoft Azure. Only that application is fetched from the host: the document itself is handed to it inside your browser and is never uploaded to it or stored on it. The viewer can be switched off per company on the SLinkHub Setup page.
You remain the controller of the data in your Business Central environment. The extensions read only the records needed for the flows above, and the permission sets they ship with make that access explicit.
8. Data Storage & Retention
- Data is stored on Microsoft Azure servers in the European Union
- Invoice data is retained for the duration of your subscription plus the legally required retention period (typically 7-10 years for financial records)
- Account data is deleted within 30 days of account termination
- Audit logs are retained for 12 months
- Webhook event logs are purged after 30 days
9. Data Security
We implement appropriate technical and organizational measures:
- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- Password hashing (ASP.NET Identity with PBKDF2)
- API keys stored as SHA-256 hashes
- Two-factor authentication (TOTP)
- Role-based access control
- Regular security updates and vulnerability scanning
- Automatic daily backups with geo-redundancy
10. Your Rights
Under GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate personal data
- Erasure: Request deletion of your personal data (subject to legal retention requirements)
- Portability: Receive your data in a structured, machine-readable format
- Restriction: Restrict processing of your personal data
- Objection: Object to processing based on legitimate interest
To exercise your rights, contact us at privacy@infivex.com. We respond within 30 days.
11. Cookies
SLinkHub portal uses essential cookies for:
- Authentication tokens (session management)
- Company context (selected company ID)
- User preferences (language, grid layout)
We do not use tracking cookies, advertising cookies, or third-party analytics.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes are posted on this page with an updated "Last updated" date. Continued use of SLinkHub after changes constitutes acceptance.
13. Contact
For privacy-related questions or concerns:
Email: privacy@infivex.com
Website: www.infivex.com