Privacy Policy

This policy explains what information Invoiceur (“we,” “us”) collects when you use invoiceur.com and our services, how we use it, and the choices you have. The short version: we collect what we need to run an invoicing product, we don’t sell your data, and your documents belong to you.

Account information. Your email address and password (stored as a secure hash by our authentication provider). If you sign in with Google instead, we receive your name, email address, and profile picture from Google — we never see your Google password, and we use only your email address and name to create and identify your account. If you sign in with Apple, we receive your name and email address from Apple (which may be a private relay address if you choose to hide yours) — we never see your Apple password.

Content you create. Documents (invoices, quotes, and similar), customer records, saved items, business profile details, logos, and signatures. This content can include personal information about you and about the people you bill — you are responsible for having a lawful basis to enter it.

Billing information. If you subscribe, our payment processor Stripe collects your payment details. We never see or store full card numbers — we keep only your subscription status, plan, and Stripe identifiers.

Support calls. If you call our support line, you will be speaking with an AI assistant and the call is recorded — the assistant says so at the start of every call. We capture the call audio, a transcript, and the details you choose to share (such as your name, a contact address, and your question) so our team can follow up. Call recordings and transcripts are kept only as long as needed to handle your request and improve support, and you can ask us to delete them at any time.

Technical data. Standard server logs (IP address, browser type, requested pages, timestamps) used for security and operations. If you use the editor while signed out, your draft is stored locally in your own browser, not on our servers.

• to provide the Service: creating, storing, and rendering your documents;
• to authenticate you and keep your account secure;
• to process subscription payments and enforce plan limits;
• to send transactional email (account confirmation, receipts, service notices);
• to prevent abuse and debug problems;
• to comply with legal obligations.

We do not sell your personal information, and we do not use the contents of your documents for advertising.

We rely on a small set of processors to run Invoiceur:

• Supabase — database and authentication (data hosted in the United States, us-east region);
• Vercel — application hosting and content delivery;
• Postmark — email delivery (invoice emails, payment reminders, account emails such as confirmation messages, and internal notifications that can include support-call transcripts);
• Stripe — payment processing for your Invoiceur subscription. Stripe is not involved in payments between you and your clients; Invoiceur does not process those.
• ElevenLabs — our phone support line. If you call us, ElevenLabs hosts the AI assistant that answers and stores the call recording and transcript described in section 2.

Each provider processes data only to perform its service for us. We will update this list if our providers change.

We use cookies for one purpose: keeping you signed in (authentication session cookies). We do not use advertising or cross-site tracking cookies. We measure aggregate product usage with Vercel Analytics, a cookieless analytics service that does not track you across sites or store identifiers on your device.

We keep your account data and content while your account is active. If you delete a document, customer, or saved item, it is removed from the live database. If you delete your account, your data is deleted, subject to short-lived backups that expire on a rolling schedule and records we must keep for legal or accounting reasons (for example, subscription billing records).

Your data is encrypted in transit (TLS) and at rest by our hosting providers. Access within the database is isolated per account using row-level security, so one account’s data is not readable by another. No system is perfectly secure; if we learn of a breach affecting your personal data we will notify you as required by law.

You can access and update your business profile, customers, items, and documents in the app at any time, and export documents as PDFs. Depending on where you live, you may also have legal rights to access, correct, delete, or port your personal data, or to object to certain processing. To exercise any of these, email support@invoiceur.com— we respond to all requests, and we don’t discriminate against you for making one.

When you store customer details or issue documents to your clients, you are the controller of that information and we process it on your behalf to provide the Service. If one of your customers contacts us about data on your documents, we will refer them to you where appropriate.

Our services are operated from the United States and your data is stored there. If you use Invoiceur from elsewhere, you understand your information will be transferred to and processed in the United States.

The Service is for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.

We may update this policy as the product evolves; material changes will be announced by email or in the product before they take effect. Questions or requests: support@invoiceur.com.