Privacy Policy

Last Updated: November 22, 2025

Introduction

This Privacy Policy describes how we collect, use, and protect your personal information when you use our invoicing service. We are committed to protecting your privacy and handling your data in an open and transparent manner.

By using this service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

We collect several types of information to provide and improve our service:

  • Personal Information: Name, email address, phone number
  • Business Information: Legal name, address, tax ID/VAT number
  • Financial Information: Bank account details (IBAN, SWIFT), invoice data
  • Usage Data: Log files, IP addresses, browser type, pages visited

How We Use Your Information

We use the collected data for various purposes:

  • To provide, maintain, and improve our service
  • To analyze usage patterns and enhance user experience
  • To communicate with you about updates, security alerts, and support
  • To comply with legal obligations and prevent fraud

Data Storage and Security

Your data is stored using Supabase, a third-party database provider with enterprise-grade security measures. We implement industry-standard encryption and security protocols.

PDF files are stored temporarily for 24 hours in secure cloud storage and are automatically deleted after this period.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share data in the following circumstances:

  • Payment Processors: Stripe for processing payments (they have their own privacy policies)
  • Legal Requirements: When required by law, court order, or government regulations
  • With Your Consent: When you explicitly authorize us to share your information

Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

DISCLAIMER: While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

Your Rights

You have the following rights regarding your personal data:

  • Right to Access: Request copies of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your personal data
  • Right to Data Portability: Request export of your data in a structured format

Cookies and Tracking

We use essential cookies for authentication and session management. With your consent, we also use analytics cookies through Sentry (for error tracking and performance monitoring) and PostHog (for usage analytics) to improve our service. We do not use third-party advertising cookies.

Third-Party Services

We use the following third-party services that may collect information:

  • Supabase: Database and authentication services
  • Stripe: Payment processing
  • Vercel: Hosting and deployment
  • PostHog: Usage analytics and user behavior tracking (with consent only)
  • Sentry: Error tracking and performance monitoring (with consent only)

Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page with an updated date.

Contact Us

If you have questions about this Privacy Policy, please contact us at: support@invoxea.com