Privacy Policy
Last Updated: November 22, 2025
Introduction
This Privacy Policy describes how we collect, use, and protect your personal information when you use our invoicing service. We are committed to protecting your privacy and handling your data in an open and transparent manner.
By using this service, you agree to the collection and use of information in accordance with this policy.
Information We Collect
We collect several types of information to provide and improve our service:
- Personal Information: Name, email address, phone number
- Business Information: Legal name, address, tax ID/VAT number
- Financial Information: Bank account details (IBAN, SWIFT), invoice data
- Usage Data: Log files, IP addresses, browser type, pages visited
How We Use Your Information
We use the collected data for various purposes:
- To provide, maintain, and improve our service
- To analyze usage patterns and enhance user experience
- To communicate with you about updates, security alerts, and support
- To comply with legal obligations and prevent fraud
Data Storage and Security
Your data is stored using Supabase, a third-party database provider with enterprise-grade security measures. We implement industry-standard encryption and security protocols.
PDF files are stored temporarily for 24 hours in secure cloud storage and are automatically deleted after this period.
Data Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share data in the following circumstances:
- Payment Processors: Stripe for processing payments (they have their own privacy policies)
- Legal Requirements: When required by law, court order, or government regulations
- With Your Consent: When you explicitly authorize us to share your information
Security Measures
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
DISCLAIMER: While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.
Your Rights
You have the following rights regarding your personal data:
- Right to Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your personal data
- Right to Data Portability: Request export of your data in a structured format
Cookies and Tracking
We use essential cookies for authentication and session management. With your consent, we also use analytics cookies through Sentry (for error tracking and performance monitoring) and PostHog (for usage analytics) to improve our service. We do not use third-party advertising cookies.
Third-Party Services
We use the following third-party services that may collect information:
- Supabase: Database and authentication services
- Stripe: Payment processing
- Vercel: Hosting and deployment
- PostHog: Usage analytics and user behavior tracking (with consent only)
- Sentry: Error tracking and performance monitoring (with consent only)
Children's Privacy
Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page with an updated date.
Contact Us
If you have questions about this Privacy Policy, please contact us at: support@invoxea.com