Privacy Policy — avat.app

avat.app ("the Service") is a free EU VAT number validation tool. This Privacy Policy explains how the Service handles information in connection with its use.

avat.app is not affiliated with the European Commission, VIES, or any government institution. Validation results are provided for informational purposes only and do not constitute legal advice.

1. What Data We Collect

The Service does not require registration, login, or any account creation. The only data processed during normal use is:

VAT numbers you enter into the tool, which are forwarded to third-party registries (see below) in order to perform validation. These are not stored after the session ends.
Bank account details entered in the IBAN checker, which are forwarded to the Czech MFCR registry for verification. These are not stored.
Settings preferences (batch size, VIES toggle, theme) stored locally in a vat_settings.json file on the machine running the server. These contain no personal information.

No personal information, no email addresses, no IP addresses, and no usage analytics are collected by the Service in its current form.

2. Third-Party Data Sources

When you use the validation tools, your queries are forwarded to these third-party services:

EU VIES (ec.europa.eu) — European Commission VAT validation system. Governed by EC privacy policy.
Czech Business Registry (ARES) (ares.gov.cz) — Czech public business registry. Governed by Czech government terms.
Czech Tax Authority (MFCR) (adisrws.mfcr.cz) — Czech Financial Administration VAT payer registry. Governed by Czech government terms.

The data returned from these sources (company names, addresses, VAT registration status) is public registry data. It is displayed to you and is not retained by the Service.

3. Cookies

The Service does not use cookies for tracking or advertising. The only browser storage used is sessionStorage to preserve admin authentication state within a single browser session. This data is automatically cleared when the browser tab is closed.

4. Data Retention

The Service does not retain any query data, validation results, or session data after your session ends. No database of checked VAT numbers is maintained.

5. Children's Privacy

The Service is designed for business use and is not directed at individuals under 18. We do not knowingly collect personal information from minors.

6. Changes to This Policy

We may update this Privacy Policy as the Service evolves. Significant changes will be reflected in the "Last updated" date at the top of this page.

7. Contact

If you have questions about this Privacy Policy, please use the contact form.