Privacy policy

Invoice is provided by ⁨Invoice, Kosovo⁩.

We are responsible for the data about you that this policy describes.

The details you enter about other people, such as your clients and the members of your team, remain yours. We store and process them only to provide the service to you, and you are responsible for being allowed to enter them.

Your account

Your name, your email address and your password, and your phone number and address if you give them. The password is stored in a protected form that we cannot read. We use these details to create your account, to sign you in and to send you the emails the service needs: confirmation and password-reset codes, a welcome message and team invitations.

Your business

The name, address, email address, phone number, registration number, bank details and logo you enter for your business. They appear on the invoices you create.

What you create

Your clients, items, invoices, estimates and recurring invoices, including your clients' contact details. An invoice, an estimate or a payment reminder that you send by email goes to the address you choose, under your business's name. A recurring invoice that you set to email itself sends each new invoice to the client's address in the same way.

Your team

The name and email address of each person you add to your team, so that they can sign in.

Your subscription

The plan you chose, its status and renewal date, and the reference of the subscription at the payment provider. We never receive or store your card details.

Messages you send us

If you write to us, we keep your message and your email address so that we can answer.

Technical data

Like every online service, our servers process your IP address and basic details of each request, and keep error logs, to run the service and keep it secure.

We use this data to provide the service you signed up for, which is our contract with you; to keep the service secure and working, which is our legitimate interest; and where the law requires it, for example to keep records of payments.

We do not sell your data, we do not use it for advertising and we do not build profiles of you.

The service needs a few cookies to work: ones that keep you signed in, one that remembers your language and one that remembers whether you allowed analytics. While you sign up, the details you type are kept in your browser until the account is created. The phone apps keep your sign-in and your language on your device.

To see how Invoice is used and what to improve, we use Google Analytics for Firebase. It records which pages and screens are opened and which features are used — for example that an invoice was created or sent, never what it says — together with your account's identifier, an identifier of your browser or app, the kind of device and browser, and an approximate location worked out from your IP address. On the website it runs only if you allow it: we ask on your first visit, and you can change your choice at any time with “Cookie settings”, below and at the foot of the website. The phone apps record the same through Firebase. Google's advertising features are turned off, so none of this is used for advertising.

We use no advertising cookies and no tracking across other sites or apps. The phone apps do not ask for access to your contacts, location, camera, microphone or photos.

We share data only with the companies that help us run Invoice, and only as far as they need it:

Amazon Web Services

Hosts the service: it stores the data, handles sign-in and delivers our emails.

Lemon Squeezy

Sells the subscriptions bought on the website and takes the payment as the merchant of record. You give your payment details directly to Lemon Squeezy, and it tells us which plan you have.

Apple, Google

Take the payment for subscriptions bought in the phone apps, through the App Store and Google Play.

RevenueCat

Keeps track of the subscriptions bought in the phone apps. It receives your account's identifier and the details of the purchase, not your name or email address.

Google Analytics for Firebase

Counts how the website and the phone apps are used, as described under “Cookies and data on your device”. It receives usage data, never the contents of your invoices or your clients' details.

Within an account, the owner and the team members the owner has added see that account's data, as far as their access allows.

We may also have to disclose data when the law requires it.

Your data is stored on Amazon Web Services servers in the United States. The other companies named above are based in the United States or process data there.

If you are in the European Economic Area, the United Kingdom or Switzerland, your data therefore leaves your country. These transfers are protected by the safeguards the law provides, such as the EU–U.S. Data Privacy Framework or the European Commission's standard contractual clauses.

We keep your data for as long as you have an account. You can delete clients, items, invoices, estimates and recurring invoices yourself at any time, and a team member's sign-in is deleted as soon as you remove that person.

When you ask us to close your account, we delete the account and everything stored in it, except what the law obliges us to keep.

You can see and correct most of your data yourself in the app. You also have the right to ask us for a copy of your data, to have it corrected or deleted, to have its use restricted, to object to its use, and to receive it in a format you can take to another service.

To use these rights, contact us; we answer within one month. If you believe we handle your data unlawfully, you can also complain to the data protection authority of your country.

If a business that uses Invoice has entered your details, for example because you are its client or a member of its team, that business decides what happens to them. Please contact that business first; if you write to us, we will pass your request on.

Data travels between your device and our servers over encrypted connections and is stored encrypted by our hosting provider. Within the service, your account's data can be opened only by you and the team members you add. No online service can promise absolute security; if something happens that puts your data at risk, we will inform you as the law requires.

Invoice is made for people who run a business. It is not directed at children, and we do not knowingly collect their data.

When we change this policy, we publish the new version on this page and update the date at the top. If a change affects how we use your data in an important way, we will tell you before it takes effect.

For any question about this policy or your data, write to invoice.bestock@gmail.com.

By post: ⁨Invoice, Kosovo⁩.