Privacy Policy
Last updated: 6/9/2026
1. Data Controller
LudoMagus GmbH
Rudolfstraße 5A
76131 Karlsruhe
Germany
Email: info@ludomagus.com
Phone: +49 15679 659261
2. Overview of Data Collection
2.1 Website
This website is purely static and does not process any personal data. We do not use cookies, external services, analytics, or tracking of any kind. Technical browser information is processed only for the functionality of displaying the website.
2.2 Desktop Application
Smart Invoice Downloader is a desktop application that operates with a privacy-first approach:
- All data processing happens locally on your computer
- No personal or business data is transmitted to our servers
- No analytics, tracking, or telemetry is collected
- Downloaded invoices are stored only on your local file system
3. Stripe OAuth Integration
When you connect your Stripe account using the "Connect to Stripe" button:
- Authentication is handled entirely by Stripe's secure OAuth system
- We never see or store your Stripe login credentials
- OAuth access and refresh tokens flow through our authentication server solely for the purpose of secure token exchange
- These tokens are NOT saved, logged, or stored on our servers - they pass through only for immediate relay to your application
- OAuth tokens are stored securely in your operating system's keychain on your local device
- The connection can be revoked at any time from your Stripe account settings
Alternative: Direct API Key Usage
Advanced users can bypass our authentication server entirely by using Stripe API keys directly.
When using the API SDK method instead of OAuth, your credentials never touch our servers and
the application operates completely independently. This option provides maximum privacy for
users who prefer complete control over their authentication.
4. Data Storage
The application stores the following data locally on your device:
- OAuth tokens (in OS keychain)
- Downloaded invoice PDFs (in your chosen directory)
- Application preferences and settings
No data is transmitted to or stored on our servers.
5. Third-Party Services
The application connects only to:
- Stripe API (for invoice retrieval)
- Our authentication handler (for secure OAuth token exchange only)
6. Your Rights
Under GDPR, you have the following rights:
- Right to information about your data
- Right to correction of incorrect data
- Right to deletion of your data
- Right to restriction of processing
- Right to data portability
- Right to object to processing
7. Data Security
We implement appropriate technical and organizational measures to protect your data:
- OAuth tokens are stored in your OS keychain using industry-standard encryption
- All connections to Stripe use HTTPS/TLS encryption
- No sensitive data is logged or cached
8. Contact for Privacy Concerns
For any privacy-related questions or to exercise your rights, please contact:
Email: privacy@ludomagus.com
Phone: +49 15679 659261
9. Changes to This Policy
We may update this privacy policy from time to time. The latest version will always be available on this website.