Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you create an account, use the Service, or communicate with us. This may include:

• Account information such as your name, email address, and password
• Business information including company name, address, and tax identifiers
• Invoice, estimate, and expense data you create within the Service
• Receipt images you upload for scanning and processing
• Client contact information you add to manage your contacts
• Payment information processed through secure third-party providers

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process invoices, estimates, and expense reports on your behalf
• Perform OCR processing on uploaded receipt images
• Generate financial reports and analytics for your dashboard
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests

3. Data Storage and Security

Your data is stored securely using industry-standard encryption at rest and in transit. We use Supabase for our backend infrastructure, which provides row-level security, encrypted database connections, and regular backups. Receipt images and generated PDFs are stored in secure cloud storage with access controls.

4. Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

• With service providers who assist in operating the Service (e.g., cloud hosting, email delivery)
• When you choose to share invoices or estimates with your clients via email or link
• When required by law, regulation, or legal process
• To protect the rights, safety, or property of InvoiceMan or others

5. Your Rights

Depending on your location, you may have the following rights:

• Access the personal data we hold about you
• Request correction of inaccurate personal data
• Request deletion of your personal data
• Export your data in a portable format
• Object to or restrict processing of your personal data
• Withdraw consent where processing is based on consent

6. Cookies and Analytics

We use essential cookies to maintain your session and preferences. We may use analytics tools to understand how the Service is used, which helps us improve performance and user experience. You can manage cookie preferences through your browser settings.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as resolving disputes.

8. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected].