Privacy Policy

Account information: When you register, we collect your name, email address, and password hash.

Business information: Information you provide for invoicing, including business name, address, Tax Registration Number (TRN), bank details, logo, and branding assets.

Client data: Names, email addresses, and contact details of your clients that you enter into the platform.

Document data: Invoices, quotations, line items, and financial records you create through the Service.

Payment data: Billing and subscription information processed by our payment processor, Creem. We do not store full card numbers — Creem handles all sensitive payment data.

Usage data: Log data such as IP address, browser type, pages visited, and timestamps, collected automatically for security and performance purposes.

We use your information to:

• Provide, maintain, and improve the Service
• Process payments and manage your subscription
• Send transactional emails (invoice reminders, password resets, billing notifications)
• Respond to support requests and communicate with you
• Monitor for fraud and ensure platform security
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

Your data is stored on Supabase infrastructure, which uses PostgreSQL databases with row-level security. All data is encrypted in transit via TLS 1.2+ and at rest using AES-256 encryption. File assets (logos, signatures, documents) are stored in access-controlled cloud storage.

We implement industry-standard security measures and conduct regular security reviews. However, no system is completely secure — we encourage you to use a strong, unique password for your account.

We use the following third-party services to operate Invios:

• Supabase — database, authentication, and file storage
• Creem — payment processing and subscription management
• Resend — transactional email delivery
• Vercel — application hosting and deployment

Each provider processes data in accordance with their own privacy policies and applicable data protection regulations. We only share the minimum information necessary for each provider to perform their function.

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate data via your account settings
• Deletion: Request deletion of your account and associated data from your account settings page. We will delete your data within 30 days, except where retention is required by law
• Portability: Export your invoice and client data using the CSV export feature
• Objection: Object to certain uses of your data by contacting us

To exercise any of these rights, contact us at privacy@invios.online.