Privacy

Vatcore processes VAT numbers and the associated registered name and address returned by the relevant tax authority (VIES for the EU-27, HMRC for the UK). This page describes what we store, where, and how to request its removal.

What we store

• Validation results in our read-through cache, keyed by country and VAT number.
• A hashed copy of each VAT number in our request log, alongside account ID, country, result, source authority, and latency. The plaintext VAT number is not retained in logs.
• Account data: your email, billing details, API keys (hashed), and usage counters.

Where we store it

All data is stored in the European Union. We use a managed PostgreSQL provider and a Redis cache instance, both located in the EU.

Right of erasure

VAT numbers belonging to sole traders are personal data under GDPR. To request removal of a specific VAT number from our cache, email p.kmetski@gmail.com with the country code and VAT number. We will action verified requests within 30 days.

Source attribution

Validation data is provided by VIES (European Commission) and HMRC (His Majesty's Revenue & Customs). Vatcore is not affiliated with either body.

This page is a working draft and will be replaced with the full legal text before paid signups open.