Privacy Policy

• Account data: your email address, authentication provider, and account identifiers used to sign you in. Passwords are stored only as secure hashes.
• Business profile: business name, address, payment instructions you optionally enter.
• Invoices and clients: data you create — client emails, line items, amounts, dates.
• Payment records: when online payments are enabled, we store transaction identifiers, amounts, currencies, statuses, and timestamps. Stripe collects and processes payment method and payout-account details; those sensitive financial details do not pass through our servers.
• Subscription records: plan, entitlement, renewal, expiration, and transaction identifiers supplied by Apple and RevenueCat. We do not receive your complete App Store payment-card details.
• Mobile app data: app version, operating system and device information needed for diagnostics, push-notification tokens when you opt in, and TestFlight feedback you choose to submit.
• Usage analytics: Vercel Analytics and PostHog collect page views, product events, interactions, referring pages, and basic device or browser information. We use this information to understand feature adoption, diagnose usability problems, and improve conversion funnels. PostHog traffic is routed through our domain and respects your browser's Do Not Track setting.
• Hosted invoice page views: when one of your clients opens an invoice link (/i/<publicId>), we record a timestamp and a one-way hash of their IP and user-agent for dedup purposes. We never store raw IP addresses, and the hash rotates daily so we cannot correlate a viewer across days. This data is shown only to you (the invoice owner) on your dashboard.

• To authenticate you using a signed web session or encrypted mobile access token, including Sign in with Apple and Google Sign-In when selected.
• To send invoice and reminder emails to your clients on your behalf.
• To generate AI content (line items, cover emails, reminder copy) — your input is sent to our AI providers (see below).
• To improve the Service via aggregate usage analytics.
• To manage App Store subscriptions, restore purchases, deliver opted-in notifications, prevent fraud, and maintain payment records.

We share data with the following sub-processors strictly to operate the Service:

• Resend — outbound email delivery
• Anthropic, OpenAI, DeepSeek, and Alibaba Cloud — AI text generation when a configured provider processes your invoice context
• Neon — Postgres database hosting
• Vercel — application hosting and aggregate web analytics
• PostHog — product analytics, interaction measurement, and feature experimentation
• Stripe — subscription billing, connected-account onboarding, invoice payment processing, and payouts
• RevenueCat, Apple, and Google — mobile subscriptions, purchase restoration, and authentication
• Expo — mobile application delivery, updates, build infrastructure, aggregate app-launch insights, and opted-in push notifications
• Cloudflare — DNS and email routing

We do not sell your data. We do not share data with advertisers.

We use an HMAC-signed session cookie on the web and encrypted device storage for mobile access tokens. Web cookies are httpOnly, sameSite=lax, and secure in production. Analytics services may use first-party cookies or storage to distinguish visits and measure product usage. We do not use cross-site advertising cookies or sell analytics data to advertisers.

You can update profile information in Settings and permanently delete your account from the app. You may also request access, export, correction, or deletion by emailing [email protected]. You can withdraw optional notification permission in device settings. We respond to verified privacy requests within 30 days.

We retain account and invoice data while your account is active. On account deletion, we delete personal data within 30 days, retaining only minimal records required for legal/financial compliance.

Our infrastructure and analytics providers, including Vercel, Neon, PostHog, and Cloudflare, may process data in the United States, Europe, and other regions where they operate. By using the Service, you acknowledge that your data may be processed in those regions.

For privacy questions, write to [email protected].