Privacy Policy

1. What We Collect

When you create an account we collect your name, company name, and email address. When you create invoices we store the data you enter, including job details, line items, and invoice records. If you upgrade to Pro we collect payment information through our billing provider — we do not store card numbers directly.

2. How We Use Your Information

• To operate and improve InvoiceFlow
• To send you transactional emails (account creation, invoice notifications)
• To contact you about your subscription or support requests
• To generate usage analytics that help us improve the product

We do not sell your data to third parties. We do not use your data for advertising.

3. Data Storage

Your data is stored on secure cloud infrastructure (Vercel and PostgreSQL-compatible hosting). File attachments and signatures are stored in Vercel Blob Storage. All data is encrypted in transit via HTTPS.

4. Cookies

We use session cookies to keep you signed in. We do not use third-party tracking cookies or advertising cookies.

5. Third-Party Services

We use the following services to operate InvoiceFlow:

• Resend — transactional email delivery
• Vercel — hosting, file storage, and edge delivery
• Google / Apple — optional OAuth sign-in (if used)

Each provider has its own privacy policy governing how they handle data in the course of providing their services.

6. Data Retention

Your account and invoice data is retained as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where retention is required by law.

7. Your Rights

You can request a copy of your data, correction of inaccurate data, or deletion of your account at any time by emailing us. We will respond within 5 business days.

8. Changes to This Policy

If we make material changes to this policy we will update the "Last updated" date above and notify active users by email.

9. Contact

Questions about this policy? Email us at hello@systeminvoice.com.