Privacy Policy

Privacy first. We collect as little as possible, never track you, and delete your data on a clear schedule.

1. Guest mode — your data never leaves your browser

The free invoice constructor runs entirely in your browser. The invoice details you type and any files you add (logo, signature, stamp) are processed locally and are never uploaded to or stored on our servers. The PDF is generated on your device. Clearing, refreshing or closing the page discards everything. We keep only an anonymous counter of how many invoices were generated — never their content.

2. Data we collect (PRO accounts)

• Account: your email address (used to sign in and as our sole channel of contact) and a hashed password.
• Company profile (optional): the details you choose to save to pre-fill invoices, and any logo/signature/stamp you upload.
• Saved invoices: the invoices you explicitly save to your journal.
• Billing metadata: payment status and subscription dates. Card data is handled by our payment partner — we never see or store card numbers.

3. Subprocessors

• Resend — transactional email delivery (welcome/activation email, password resets, reminders).
• Payment Merchant of Record — the third party that processes payments and is the legal seller. The current provider is Paddle.

4. Cookies

We use only strictly necessary technical cookies set by our framework (session and CSRF protection). We do not use analytics, advertising, tracking cookies, pixels, fingerprinting or any third-party counters. Because there are no non-essential cookies, no cookie banner is required. You can verify this in your browser’s developer tools: no cookies beyond the technical ones are set.

5. Data retention and deletion

Account data is kept while your subscription is active. After a subscription ends, your data is retained for 14 days and then permanently deleted. You can request deletion sooner by contacting support.

An account that is registered but never used — no company profile or saved invoices — and never subscribed is treated as unused and removed 7 days after registration.

6. Your rights

You can access, correct or delete your account data by writing to support. Note that your account email cannot be changed (see the Terms): it is the single trusted channel we use to reach you.