1. Information We Collect
We collect the following types of information when you use InvoicAI:
- Account Information: Name, email address, company name, and business address provided during registration.
- Business Data: Invoices, client details, product/service information, and payment records you create within the platform.
- Usage Data: IP addresses, browser type, device information, pages visited, and actions taken within the platform.
- Cookies: Session cookies for authentication and preference management.
2. How We Use Your Information
- To provide, maintain, and improve the Service.
- To send transactional emails (invoices, account notifications).
- To provide AI-powered suggestions based on your invoicing history.
- To monitor and prevent fraud, abuse, and security threats.
- To comply with legal obligations and enforce our Terms of Service.
3. Data Isolation & Security
InvoicAI uses a multi-tenant architecture where each business's data is logically isolated. Your business data is never shared with or accessible to other tenants. We implement industry-standard security measures including encrypted connections (TLS/SSL), hashed passwords, and two-factor authentication to protect your data.
4. Data Sharing
We do not sell, trade, or rent your personal information. We may share data only in the following circumstances:
- Legal Requirements: When required by law, court order, or governmental authority.
- Service Providers: With trusted third-party services that help us operate the platform (e.g., email delivery, hosting), bound by strict confidentiality agreements.
5. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.
6. Your Rights
- Access: You can access and view your personal data at any time through your account settings.
- Correction: You can update or correct your information through your profile page.
- Export: You can request a full export of your data in standard formats.
- Deletion: You can request deletion of your account and associated data.
- GDPR Rights: If you are in the European Union, you have the right to data portability, the right to erasure ("right to be forgotten"), and the right to restrict processing.
7. Cookies
We use essential cookies for authentication and session management. These cookies are strictly necessary for the Service to function. We do not use third-party tracking or advertising cookies.
8. International Users
Your information may be transferred to and processed in countries where our servers are located. By using the Service, you consent to such transfer. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of significant changes via email. Continued use of the Service constitutes acceptance of the updated policy.