Privacy Policy

Privacy first. We collect as little as possible, load analytics only if you agree, and delete your data on a clear schedule.

1. Guest mode — your data never leaves your browser

The free invoice constructor runs entirely in your browser. The invoice details you type and any files you add (logo, signature, stamp) are processed locally and are never uploaded to or stored on our servers. The PDF is generated on your device. Clearing, refreshing or closing the page discards everything. We keep only an anonymous counter of how many invoices were generated — never their content.

2. Data we collect (PRO accounts)

• Account: your email address (used to sign in and as our sole channel of contact) and a hashed password.
• Company profile (optional): the details you choose to save to pre-fill invoices, and any logo/signature/stamp you upload.
• Saved invoices: the invoices you explicitly save to your journal.
• Billing metadata: payment status and subscription dates. Card data is handled by our payment partner — we never see or store card numbers.

3. Subprocessors

• Resend — transactional email delivery (welcome/activation email, password resets, reminders).
• Payment Merchant of Record — the third party that processes payments and is the legal seller. The current provider is Paddle.

4. Cookies

Strictly necessary cookies. Our framework sets a session cookie and a CSRF-protection cookie; without them you could not sign in or submit a form safely. We also store your cookie choice itself in a cookie of ours, so we do not have to ask again on every page. These are always set and need no consent, because the service cannot work without them.

Analytics cookies — only if you say yes. We would like to measure how the site is used so we know what to improve. This is off until you accept: until then no analytics script is loaded and no request is made to any analytics provider at all. If you accept, Google Analytics is loaded and sets its own cookies. You can verify both states in your browser’s developer tools.

Changing your mind. Use the Cookie choices link in the footer at any time — it brings the banner back so you can decide again. We never treat silence, a page scroll or a continued visit as consent.

We do not use advertising cookies, pixels or fingerprinting, and we never sell or share your data with advertisers.

5. Data retention and deletion

Account data is kept while your subscription is active. After a subscription ends, your data is retained for 14 days and then permanently deleted. You can request deletion sooner by contacting support.

An account that is registered but never used — no company profile or saved invoices — and never subscribed is treated as unused and removed 7 days after registration.

6. Your rights

You can access, correct or delete your account data by writing to support. Note that your account email cannot be changed (see the Terms): it is the single trusted channel we use to reach you.