Introduction
Anteiku ("Anteiku", "we", "us", or "our") provides an invoice intelligence and operations platform for restaurants and cafés. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, create an account, or use our services.
By using Anteiku, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.
Data controller
Anteiku is the data controller for personal information processed in connection with the Anteiku service (the "Service"). This means we decide why and how your personal data is processed when you use our website, create an account, or use our platform.
For privacy questions or to exercise your data protection rights, contact us at support@anteiku.live. We will identify the appropriate contact point for data protection matters in our response.
Information we collect
We collect information in the following categories:
Account information
When you register or are invited to a workspace, we collect your name, email address, authentication credentials, workspace role, and business profile details such as business name, country, currency, and timezone.
Uploaded invoices
When you upload supplier invoices or related documents, we process the files and extracted data, including line items, amounts, dates, supplier names, and product descriptions contained in those documents.
Supplier information
We store supplier names, invoice metadata, and product matching data derived from your uploads and manual catalog entries to provide cost tracking and import features.
Usage analytics
With your consent, we collect product analytics such as pages visited, features used, performance data, and error diagnostics through PostHog. We do not use advertising cookies or sell analytics data.
How we use data
We use personal and business data to:
- Provide, maintain, and improve Anteiku's features and services.
- Authenticate users and manage workspace access and team permissions.
- Process uploaded invoices and generate operational and cost insights.
- Communicate with you about your account, billing, security, and product updates.
- Detect, prevent, and address fraud, abuse, and technical issues.
- Comply with legal obligations and enforce our Terms of Service.
We process personal data on the basis of contract performance, legitimate interests in operating and improving our service, compliance with legal obligations, and, where required, your consent.
AI processing
Anteiku uses artificial intelligence to extract structured data from uploaded invoices and to generate operational insights. Uploaded invoice content may be securely transmitted to trusted AI providers — including Mistral AI and OpenAI — solely for the purpose of document extraction, product matching, and related analysis required to deliver the service.
We do not sell your invoice data to AI providers. Processing is limited to what is necessary to provide the features you use. Where possible, we apply access controls, encryption in transit, and contractual safeguards with subprocessors.
AI-generated outputs may be inaccurate or incomplete. They are intended to assist your review of operational data and should not be relied upon as the sole basis for purchasing, accounting, taxation, pricing, inventory, or other business decisions.
International data transfers
Anteiku is operated using infrastructure and service providers that may process personal data in the United Kingdom, the European Economic Area (EEA), the United States, and other countries where those providers maintain facilities.
In particular, data may be processed by:
- Supabase — authentication, database hosting, and file storage.
- Vercel — application hosting and content delivery.
- Mistral AI and OpenAI — document extraction and AI-assisted analysis of uploaded content.
- Paddle — subscription billing and payment processing.
Where personal data is transferred outside the UK or EEA to countries that have not been recognised as providing an adequate level of data protection, we rely on appropriate safeguards as required by applicable law. These may include the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, and equivalent contractual protections offered by our subprocessors.
You may contact us at support@anteiku.live for more information about the safeguards we use for international transfers.
Data retention
We retain personal and business data for as long as your account is active or as needed to provide the service. Invoice files and extracted data are retained according to your workspace activity and operational requirements.
When you delete content, close an account, or request deletion, we will delete or anonymise data within a reasonable period, except where retention is required for legal, accounting, tax, dispute resolution, or security purposes.
Data security
We implement administrative, technical, and organisational measures designed to protect your data, including encrypted connections (HTTPS), access controls, authenticated APIs, and tenant isolation between workspaces.
No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.
You are responsible for maintaining the confidentiality of your account credentials and for activity carried out through your account. Use a strong, unique password, limit workspace access to authorised team members, and notify us promptly if you suspect unauthorised access.
GDPR rights
If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction with similar data protection laws, you may have the following rights:
- Access to the personal data we hold about you.
- Correction of inaccurate or incomplete data.
- Erasure of your data in certain circumstances.
- Restriction or objection to certain processing.
- Data portability, where applicable.
- Withdrawal of consent where processing is consent-based.
- Lodging a complaint with your local supervisory authority.
To exercise these rights, contact us at support@anteiku.live. We will respond within the timeframe required by applicable law.
Third-party services
We rely on trusted third-party providers to operate Anteiku, including:
- Supabase — authentication, database hosting, and file storage.
- Vercel — application hosting, delivery, and operational monitoring.
- Paddle — subscription billing and payment processing.
- Mistral AI / OpenAI — invoice extraction and AI-assisted insights.
- PostHog — product analytics and error diagnostics (only when you consent to analytics cookies).
These providers process data on our behalf under contractual terms appropriate to their role, including data processing and security obligations where applicable. Their own privacy policies may also apply where you interact with them directly (for example, during checkout).
See the International data transfers section for more detail on cross-border processing.
Contact
For privacy questions, data subject requests, or security concerns, contact us at support@anteiku.live.
See also our Terms of Service and Refund Policy.