Privacy policy
Effective 4 November 2026
This policy explains what InvoiceFlow (“we”) collects when you use InvoiceFlow, why, who helps us run the service, and what you can ask us to do with your information.
What we collect
- Your name, email address and profile picture from Google when you sign in.
- Your business profile: business name, address, logo, accent colour and invoice prefix.
- Your clients’ names, email addresses, companies and addresses that you enter.
- Invoices, estimates, line items, notes and payment status.
- API keys you create. We store only a one-way hash and a short prefix, never the key itself.
- Identifiers for your connected Stripe account and your InvoiceFlow subscription. We never see or store full card numbers.
- Server logs, such as request times and errors, used to keep the service working and secure.
Why we use it
- To provide InvoiceFlow: storing your records, generating PDFs and public invoice links, and showing reports.
- To send invoices, reminders and payment confirmations when you ask us to.
- To bill your InvoiceFlow subscription.
- To keep the service secure, prevent abuse and fix problems.
We do not sell your information. We do not use advertising or analytics trackers.
Who helps us run InvoiceFlow
These providers process information on our behalf, only to run the service:
- Vercel — hosting.
- Neon — database.
- Google — sign-in.
- Stripe — invoice payments and subscription billing.
- Resend — email delivery.
Your clients’ information
When you add a client, you decide what to enter and why. You are responsible for having a lawful reason to store their details and to send them invoices and reminders through InvoiceFlow.
How long we keep it
We keep your information while your account is open. If you ask us to delete your account, we delete your information within 30 days of verifying the request, except for records the law requires us to keep.
Your choices and rights
You can export your clients and invoices as CSV files and download any invoice as a PDF at any time. You can ask to see, correct or delete the personal information we hold about you by contacting us by email at EthanSch3140@gmail.com.
Law that applies
We handle personal information in line with the New Zealand Privacy Act 2020.
Changes and contact
If we change this policy, we will update the effective date above and, for significant changes, tell you in the app or by email. Questions are welcome by email at EthanSch3140@gmail.com.