Who we are
Solvo is a Dutch provider of online bookkeeping for freelancers (zzp'ers) and small businesses.
For your account data (who you are, how you sign in) we are the controller within the meaning of the GDPR. For the contents of your administration — for instance the details of yóur customers on invoices — you are the controller and we process that data on your behalf, as a processor. Solvo gives no tax or legal advice; this statement explains data processing, nothing more.
Which data we process
Three groups, and no more than that:
- Account data. Your name, email address, password (stored only as a hash — never as readable text, we can't see it either) and your settings for two-step verification.
- Bookkeeping data you enter. Bank transactions you import, invoices you create or receive, receipts and documents you send in, and the contacts, articles and entries that follow from them. This is your data; we store and process it solely to provide the service.
- Technical logs. Sign-in data (time, IP address), the audit trail of actions in your administration and error reports. These logs exist to keep your books verifiable and your account safe.
What we use it for
For three things:
- Providing the service. Keeping your books, preparing your VAT return for you to file, producing your reports. Legal basis: our agreement with you.
- Security and verifiability. Detecting misuse, keeping out intrusion attempts and maintaining the audit trail. Legal basis: our legitimate interest — and yours.
- Support. If you ask us a question, we look at your data as far as needed to help you — no further.
What we do not do: we don't sell data, we don't show ads and we don't build profiles for third parties. Your books are not a business model — your subscription is.
AI processing
Solvo can have receipts and documents read by AI. A strict framework applies:
- Documents go to the AI processor (Anthropic) only if AI reading is switched on for your administration. You can switch it off per administration; then no document leaves your administration for AI processing.
- Documents are processed exclusively under a data processing agreement. Your documents are never used to train AI models.
- Every AI proposal is checked by our own deterministic verification and only posted after your confirmation — AI never decides about your books on its own.
On the security page you can read in detail how this processing is set up technically.
Where your data lives
Your data is hosted in the European Union and encrypted — both in transit and at rest. On top of that, each administration is isolated from every other at the database level: technically enforced, not just promised.
Retention periods
We keep your data for as long as your account exists — which makes sense: your books simply have to be there when you sign in. Two things are worth knowing:
- The statutory retention obligation (fiscale bewaarplicht) for your own records rests with you as the entrepreneur, not with us. Solvo helps you meet it — among other things with the full export — but the obligation itself is yours.
- If you cancel, you first export your complete administration in open formats. After that we delete your data from our systems. No archive-on-a-shelf at our end, no small print.
Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction of processing, objection and data portability. At Solvo that last one is not a form but a product feature: the full export of your administration — entries, documents and audit file, in open formats — is simply part of the product and works at any moment.
If you want to exercise any of your other rights, contact us; we respond within the statutory period. If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Processors
We engage a small number of parties to be able to provide the service — and only under a data processing agreement that binds them to the same rules:
- Hosting — in the EU, for running the application and the database.
- Email delivery — for sending, for example, the invoices and reminders you send, and our own service messages.
- AI processor (Anthropic) — solely for reading documents, and only if you have that switched on (see above).
No other parties get access to your data, unless the law obliges us to provide it.
Changes
If we change this statement, we'll publish the new version here and update the date at the top. If something material changes in what we do with your data, we'll let you know beforehand via the product or by email — not afterwards in a footnote.
Contact
Questions about privacy, or a request about your data? Get in touch via the contact page. You'll get an answer from a human who understands your question.