InstaInvoice

Privacy Policy

Effective date: 2026-07-12

1. Introduction

InstaInvoice (“we”, “us”, “our”) respects your privacy. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and your rights.

2. Scope

This Policy applies to data collected through our website, Progressive Web App (PWA), and related services.

3. Information We Collect

We collect the following categories of information:

A. Account & Identity Data

Name, email address, business/organisation name, business address, phone, website, and logo. If you sign in with Google, we receive your name, email address, and profile picture from Google.

B. Billing & Payment Data

InstaInvoice is currently free during beta and we do not collect payment from you or store any card data. Payment records you enter against invoices (amounts, dates, methods) are stored as part of your invoice data. If we introduce paid plans, payments will be handled by a third-party processor and this Policy will be updated first.

C. Invoice & Client Data

Invoice content, client names, client emails, invoice PDFs, line items, dates, amounts, tax info.

D. Usage & Analytics

Logs of actions you take in the app, IP addresses, device/browser information, timestamps, and feature usage metrics.

E. Communication & Feedback Data

Messages you send to support, emails, and feedback you submit through the in-app feedback form (including the page you were on when you sent it).

F. Cookies & Tracking

Cookies, local storage, and similar technologies to remember preferences, authenticate sessions, and analyse usage.

4. How We Use Your Information

We use your data to:

  • Provide, maintain, and improve the Service;
  • Generate and store invoice PDFs and deliver invoice emails on your behalf;
  • Send transactional messages (account confirmation, password reset, invoice delivery);
  • Monitor errors and keep the Service secure (including rate limiting by IP address);
  • Understand feature usage to improve the product;
  • Review feedback you submit during the beta;
  • Comply with legal obligations.

5. Legal Bases (GDPR)

Where applicable, our lawful bases include: performance of a contract, legitimate interests (operating and securing the Service), compliance with legal obligations, and consent for marketing communications.

6. Sharing & Disclosure

We may share personal data with:

  • Supabase — authentication, database, and file storage (invoice data, PDFs, logos).
  • Resend — delivery of invoice and account emails.
  • Vercel — application hosting and aggregate, privacy-friendly analytics.
  • Sentry — error monitoring and diagnostics.
  • Upstash — rate limiting to protect the Service from abuse (processes IP addresses).
  • Google — if you choose to sign in with Google.
  • Your invoice recipients — invoices you send by email or share via a public link contain the invoice data you entered.
  • Legal & safety: when required by law or to protect rights and safety.

We do not sell personal data, and we do not send marketing emails during the beta.

Public invoice links: when you share an invoice via a public link, anyone with that link can view and download the invoice PDF. Share links only with people you intend to see the invoice.

7. International Transfers

Your data may be stored or processed in countries outside your home country. Where required, we will take steps to ensure appropriate protections are in place.

8. Data Retention

We retain your personal data for as long as your account exists or as necessary to provide the Service and comply with legal obligations. You can request deletion as explained below.

9. Your Rights

Depending on your jurisdiction, you may have rights including:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion (“right to be forgotten”) subject to legal retention needs
  • Object to or restrict processing
  • Data portability
  • Withdraw consent where processing is based on consent

To exercise rights, contact contact@instainvoice.io.

10. Security

We implement reasonable administrative, technical, and physical measures to protect personal data including encryption for data in transit and role-based access controls.

11. Children

Our Service is not intended for individuals under 13. We do not knowingly collect personal information from children under 13.

12. Third-Party Links & Integrations

The Service may link to third-party sites. Their privacy practices are governed by their own policies. We are not responsible for those third parties.

13. Cookies & Tracking

We use cookies and similar technologies for authentication, preferences, and analytics. You may manage cookie preferences via browser settings.

14. Changes to This Policy

We may update this Privacy Policy. Material changes will be notified by email or in-app notice prior to taking effect.

15. Contact

For questions, requests, or complaints: contact@instainvoice.io