Legal

Privacy policy

What we collect to run your invoicing workspace, and what we deliberately never touch.

Draft for review. This page is a working draft and is not yet legal advice or a binding agreement.

01What this policy covers

This draft explains how account, business and invoice data is handled in this application. It applies to merchants who create an account and to their customers who open an invoice link.

Because the platform is still being reviewed, this text is a draft and should not be relied on as a final statement of practice.

02Information we hold

Account information: your name, email address, login credentials managed by the authentication provider, and your role.

Business information: business name, address, contact details, tax identifier if you provide one, default currency and logo.

Invoice information: client names and contact details you enter, line items, amounts, notes and the status history of each document.

Payment information: provider references, amounts, currency, fees and status. We never receive or store full card numbers, card security codes, or online banking credentials.

03Card and banking data

Card details are collected only by the payment provider's hosted checkout page. This application receives the result of that checkout — an amount, a currency, a reference and a status — and never the card itself.

We do not ask for, and must never be sent, card PINs, online banking passwords or one-time banking codes.

04How information is used

To create, store and share invoices and estimates, to calculate totals and balances, and to keep a record of financial movements for you and for reconciliation.

To send transactional messages you trigger or configure, such as invoice emails, reminders and receipts. Delivery status is recorded, but an accepted send is not proof of delivery.

To review merchant verification and payout requests, and to detect duplicate or abusive activity.

05Who can see your records

Your clients, invoices, estimates, transactions and balances are private to your account. Access is enforced on the server for every read and write, not merely hidden in the interface.

Public invoice and estimate links use an unguessable token and expose only the details a payer needs to understand and settle the document.

Authorised administrators may review account, verification, payout and payment-exception records to operate the service and respond to support requests.

06Retention and your choices

Financial records are retained so that invoices, payments and payouts remain auditable. Corrections are recorded as new entries rather than by deleting history.

You can update your business details at any time, and you can ask support to close your account. Some records may need to be retained to satisfy accounting or dispute obligations.

07Contact

Questions about this draft can be sent through the support page and will be logged as a support ticket.

Need something clarified? Contact support and your question will be logged for review.