Privacy Policy

Invoice Journey ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our website and invoicing platform (the "Service").

Account information: Name, email address, password (stored hashed), business name, and profile details you provide during signup or onboarding.

Business and invoice data: Client names and contact details, invoice content, payment records, reminders, notes, and files you upload.

Document tools: PaddleOCR reads supported invoices and receipts on your device. Recognition models are downloaded when needed. Local recognition and CSV export do not require uploading your document.

Saving an invoice draft sends the reviewed invoice details to your account. Saving a receipt also uploads its original files to private storage, together with the reviewed amounts, project assignment, corrections, and refund history. Saved records are linked to your business.

Usage data: Log data such as IP address, browser type, device information, pages visited, and actions taken in the app.

Communications: Messages you send to support, general client conversations (including conversations before an invoice exists), invoice conversations, reply sender addresses, attachment metadata, and records of emails and push notifications sent through the Service on your behalf.

We use collected information to:

• Provide, maintain, and improve the Service
• Process invoices, track payment status, and deliver notifications
• When requested or enabled, prepare AI-assisted message drafts and follow-up suggestions from relevant invoice and conversation context
• Authenticate users and prevent fraud or abuse
• Respond to support requests and send service-related messages
• Analyze usage to improve features and performance
• Comply with legal obligations

We do not sell your personal information. We may share information with service providers who help us operate the Service (e.g., hosting, email delivery, analytics), subject to confidentiality obligations. We may also disclose information if required by law, to protect rights and safety, or in connection with a merger or acquisition.

When you send an invoice, relevant information is shared with your clients as you direct. You control what client data is included on invoices and public invoice links.

When you choose to email a client, our email delivery provider processes the recipient address, subject and message. Replies addressed to that conversation are stored for you to read and respond to. Delivery feedback helps us show accepted, delayed or failed delivery and respect opt-outs; email acceptance or delivery is not proof of payment. General client messages do not enable AI automation.

When configured, AI reply classification and drafting may send the invoice number, due date, relevant customer reply, reply time and a safe draft template to our AI service provider, OpenRouter. The draft is checked and may fall back to a template; a generated draft is not itself sent to your client. Automatic follow-ups use your selected settings and the delivery services needed to send an authorized email. Do not include information in a conversation that you do not want processed for these features.

A manually requested AI reminder draft sends only your selected language, tone, and a generic reminder template to OpenRouter; it does not send the client name, invoice number, amount, or payment details in that request. We store a successfully generated draft with its invoice revision and operation identifier so you can recover it and we can prevent duplicate usage charges. You review and choose whether to send the final message. Sending then uses our email delivery provider and includes the current invoice context.

If you choose upload recognition, the selected document pages are sent through our server to OpenRouter and its selected model and document-processing providers. These pages may contain names, addresses, payment details, and other information printed on the document. Local recognition failures do not automatically authorize this upload.

We retain account and invoice data while your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account from Settings or by contacting us. Saved receipt records and original files follow these account-data retention practices.

The web app may keep a temporary receipt review, including selected files, in this browser tab so you can recover after a refresh. The recovery copy is cleared when you sign out or switch accounts; copies older than 24 hours are discarded when recovery is attempted. Browser storage settings can prevent recovery.

We implement administrative, technical, and organizational measures designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to access, correct, delete, or export your personal data, or to object to or restrict certain processing. You can update much of your account information in Settings. You can request an account export or delete your account in Settings, subject to identity verification. Export links expire; some financial records may be retained where required by law. To exercise other rights, contact us at the email below.

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. You can control cookies through your browser settings, though some features may not function properly if cookies are disabled.

We load Google Analytics only after you choose Allow analytics. Your choice is stored in this browser for 90 days. Analytics cookies also expire after 90 days without automatic renewal. Declining does not affect invoicing or sign-in. Our application replaces invoice, quote, customer, recurring schedule, payment-page, and public-document identifiers with generic route labels before recording page views, and does not intentionally send invoice content, access codes, customer names, or URL query parameters as analytics event data. Analytics collection is disabled when Global Privacy Control is enabled. A Do Not Track preference does not make the choice for you: analytics remains off until you explicitly allow it. We record successful email account creation, completed onboarding, invoice creation, and send acceptance as aggregate events, without business identifiers or amounts. Send acceptance does not prove inbox delivery. Google Signals and advertising consent are disabled; analytics consent does not enable Google Ads. We remove URL queries, fragments, and full referrer paths from this integration. You can withdraw consent below or in Settings → Privacy without leaving the page or losing your draft.

The Service is not intended for individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us data, please contact us so we can delete it.

If you access the Service from outside your home country, your information may be processed in countries with different data protection laws. By using the Service, you consent to such processing where permitted by applicable law.

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Material changes may be communicated via email or in-app notice.

Privacy questions or requests? Email privacy@invoicejourney.com.