Privacy policy

This policy explains what information Invogital collects when you use this website and the app, how it's used, and the choices you have.

Invogital is operated by [company legal name], [registered address] ("we", "us"). We're responsible for the information described here.

We collect only what we need to run the service:

• Account details: your name, email address and sign-in method. Passwords are handled by our authentication provider and are never stored in readable form.
• Business details you enter: company name, addresses, tax and registration numbers, bank details, logo and settings.
• Records you create: customers, products, quotations, invoices, payments, expenses, receipt files and email templates.
• Technical information: IP address, browser type and request logs, used to keep the service secure and working.

When you add customers and send them documents, you decide what information is stored and why. We process that information on your behalf, only to provide the service to you, and we don't contact your customers for our own purposes.

When a customer opens an invoice or quotation link, we record when it was first viewed so you can see it.

We use information to:

• Provide the service: store your records, create PDFs and send the emails you ask us to send
• Keep accounts and data secure, and prevent fraud and abuse
• Answer support requests
• Tell you about important changes to the service or these policies

We use a small number of providers to run the service. They process information only on our instructions:

Some of these providers may process information in countries other than yours, under safeguards required by applicable law. [Add transfer mechanisms and data locations.]

• Supabase: database, authentication and file storage
• Vercel: website and application hosting
• Resend: delivery of the emails you send from the app

We use only the cookies needed to keep you signed in and to protect your session. We don't use advertising or cross-site tracking cookies.

We keep your information for as long as your account is open. Financial records such as issued invoices and payments are cancelled or voided rather than erased, because businesses usually need them for tax and accounting.

If you close your account, we delete or anonymise your information within [period], except where we must keep it longer by law.

Connections to the service are encrypted. Each business's records are kept apart in the database, every request checks your permissions, and public document links use long random codes that can be replaced at any time. No system is perfectly secure, and we'll tell affected users promptly if a breach occurs.

Depending on where you live, you may have the right to access, correct, export or delete your information, or to object to how it's used. Most information can be viewed, changed or exported directly in the app. For anything else, contact us and we'll respond within [period].

We'll update the date at the top of this page when the policy changes, and tell you by email or in the app about significant changes.

Questions about privacy: support@invogital.com. [Add a postal address and, if required, a data protection officer or representative.]