Privacy Policy

1. Introduction

Welcome to InvoiceFlow. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our invoicing platform and services.

By accessing or using InvoiceFlow, you agree to the terms of this Privacy Policy. If you do not agree with our policies and practices, please do not use our services. This policy should be read in conjunction with our Terms of Service.

2. Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our services, and information from third-party sources. The types of personal information we may collect include:

Account Information: Name, email address, password, business name, and contact details
Billing Information: Payment card details, billing address, and transaction history
Invoice Data: Client information, invoice details, and payment records you create
Usage Data: Information about how you interact with our services, including IP address, browser type, and device information
Communication Data: Messages, feedback, and support requests you send to us

3. How We Use Your Information

We use the information we collect for various purposes to provide and improve our services:

To create and manage your account and provide our invoicing services
To process transactions and send related information, including confirmations and invoices
To send you technical notices, updates, security alerts, and support messages
To respond to your comments, questions, and customer service requests
To analyze usage patterns and improve our services, features, and user experience
To detect, prevent, and address fraud, security issues, and technical problems
To comply with legal obligations and enforce our terms and policies

4. Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit using TLS/SSL protocols
Encryption of sensitive data at rest using AES-256 encryption
Regular security assessments and penetration testing
Access controls and authentication mechanisms
Secure data centers with physical and environmental safeguards

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

5. Third-Party Services

We may share your information with third-party service providers who perform services on our behalf. These providers have access to your personal information only to perform specific tasks and are obligated to protect your information. Our third-party partners include:

Payment Processors: To securely process your payments and transactions
Cloud Infrastructure: To host and store your data securely
Email Services: To send transactional emails and notifications
Analytics Providers: To help us understand usage patterns and improve our services
Customer Support Tools: To provide efficient customer service

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Your Rights (GDPR Compliance)

If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, you have certain rights regarding your personal information:

Right to Access: You can request a copy of your personal data we hold
Right to Rectification: You can request correction of inaccurate or incomplete data
Right to Erasure: You can request deletion of your personal data under certain conditions
Right to Restrict Processing: You can request limitation of how we use your data
Right to Data Portability: You can request your data in a structured, machine-readable format
Right to Object: You can object to our processing of your personal data
Right to Withdraw Consent: You can withdraw consent at any time where we rely on consent for processing

To exercise any of these rights, please contact us. We will respond to your request within 30 days.

7. Cookies and Tracking

We use cookies and similar tracking technologies to collect and track information about your activity on our platform. Cookies are small data files stored on your device that help us improve your experience. We use the following types of cookies:

Essential Cookies: Required for the platform to function properly (authentication, security)
Functional Cookies: Remember your preferences and settings
Analytics Cookies: Help us understand how you use our services
Performance Cookies: Help us improve platform performance and user experience

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our platform.

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The retention period may vary depending on the context of the processing and our legal obligations.

For active accounts, we retain your data for the duration of your relationship with us. After account termination, we may retain certain information for up to 7 years to comply with legal obligations, resolve disputes, and enforce our agreements.

You may request deletion of your data at any time, subject to our legal retention requirements. We will securely delete or anonymize your personal information when it is no longer needed.

9. Children's Privacy

InvoiceFlow is not intended for use by children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately.

If we discover that we have collected personal information from a child under 18, we will take steps to delete that information as quickly as possible.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will update the "Last updated" date at the top of this page.

For significant changes, we will provide more prominent notice, such as an email notification or an in-app alert. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please don't hesitate to reach out to us through our Contact page.

For information about our service terms and conditions, please review our Terms of Service.