Privacy Policy

1. Who is responsible

InvoQuick is responsible for the personal data processed through InvoQuick. Contact: support@invoquick.com.

2. Data we collect

Account: name, email address and password (stored only as a secure hash).

Business and invoices: the details you enter about your business, your clients (names, addresses, emails, tax numbers) and your invoices.

AI generation: the text you paste to generate an invoice.

Support: the messages you send us through the contact form.

Technical data: server logs (IP address, date, request) kept for security and troubleshooting.

3. Why we use it

To provide the service (contract), to secure it and prevent abuse (legitimate interest), to answer your requests, and to meet our legal obligations. We do not sell your data and do not use it for advertising.

4. Service providers

We use providers that process data on our behalf: Render (application hosting, European Union), MongoDB Atlas (database hosting) and Google (Gemini API, which processes the text you submit for AI generation). Some providers may process data outside your country, with appropriate safeguards such as standard contractual clauses.

5. How long we keep it

Account and invoice data are kept while your account is open. Issued invoices may need to be kept longer to meet accounting obligations. After you delete your account, data is erased within 30 days, except what the law requires us to keep. Server logs are kept for up to 12 months.

6. Cookies and local storage

InvoQuick does not use advertising or tracking cookies. Your browser stores your session token and your language choice locally, only so the app works.

7. Your rights

Depending on where you live (for example under the UK GDPR, the EU GDPR, the California Consumer Privacy Act, Canada's PIPEDA or Australia's Privacy Act), you may have the right to access, correct, delete or export your data, and to object to or restrict some processing. Write to support@invoquick.com; we answer within 30 days.

You can also complain to your data protection authority (for example the ICO in the UK, the OPC in Canada or the OAIC in Australia).

8. Security and changes

Data is encrypted in transit (HTTPS), passwords are hashed and access is restricted. We will inform you of material changes to this policy by email or in the app.