Privacy Policy

The short version

1. Who we are

Invoizr is operated by Zivash Ventures LLC, 20770 US HWY 281 N STE 108-404, San Antonio, TX 78258, United States (“Invoizr”, “we”, “us”). This policy covers invoizr.com, the web app at app.invoizr.com, the client pages at pay.invoizr.com, and the Invoizr apps for iPhone, iPad and Android (together, the “Service”).

For your own account and business details, we decide how the information is used (in European terms, we are the “controller”). For information about your clients that you put into Invoizr, we act on your behalf as your service provider (or “processor”); see section 3.

2. What we collect

Information you give us

• Account: your email address and password. Passwords are stored by Google Firebase Authentication in a form we can’t read. If you sign in with Apple or Google, we receive your name, email address (Apple may give us a private relay address instead) and an account identifier from them.
• Business details: business name, your name, email, phone, website, address, tax ID or license number if you add them, logo, invoice color, template, settings, and the signature you draw.
• What you create: invoices, estimates, line items and prices, notes, your clients’ names and contact details, payments you record, expenses, receipt photos and job photos.
• Support: what you tell us when you contact us.

Payments and subscriptions

• Online payments: to let clients pay online, you set up an account with Stripe, and Stripe collects your identity and bank details directly. We receive your Stripe account’s status, and the payments, refunds, disputes and payouts on it, so we can show them to you. We don’t receive full bank account or card numbers.
• Your Invoizr plan: plans bought on the web are billed by Stripe. Plans bought in the app are billed by Apple (App Store) or Google (Google Play), managed for us by RevenueCat. We receive which plan you have, its status and its dates, not your payment details.

Collected automatically

• Notifications: if you turn on push notifications, a push token for your phone or browser and the device’s model name (such as “iPhone 15”), so we can send alerts and show you which devices get them.
• Technical logs: our hosting provider records IP addresses, browser or device type and times of requests, which we use for security and fixing problems.
• Email delivery: whether emails we send for you were delivered, opened or bounced (see section 3).
• Error reports: when the app or website hits an error or crashes, a report goes to our error-reporting provider, Sentry, so we can fix it. It says what went wrong in our code, which screen or page it happened on, the device or browser type, the operating system and app version, and your account ID. Reports leave out your name, email address, IP address, and your invoices and clients’ details.
• How you found and use Invoizr: when you sign up, the website that sent you to us (just its address, such as google.com), any campaign tag on the link you used, and whether you signed up on the web, iPhone or Android. We also note the first time you make, send and get paid online for an invoice or estimate. We look at this as totals across all accounts, to see how Invoizr is doing and what to improve.
• Website visits: we count visits to invoizr.com pages and which website sent each visit, as daily totals. We keep nothing that identifies a visitor: no cookies, no IP address and no device ID.

Phone permissions

The app asks for the camera and photo library only when you choose to add a logo, receipt or job photo, and for notifications only when you turn alerts on. Each is optional, and you can turn it off at any time in your phone’s settings. We don’t access your location, contacts, microphone or health data.

What we don’t do

Invoizr has no advertising, no advertising identifiers, and no third-party analytics or tracking tools: the counts above are our own. Error reports are used only to fix problems. We don’t track you across other companies’ apps or websites. The website and web app use your browser’s storage only to keep you signed in, remember your settings, and remember which website sent you until you close the tab (so it can be noted if you sign up); we don’t use cookies for tracking or advertising.

3. Information about your clients

When you invoice someone, you give us their details, and we process them only to provide the Service to you. You’re responsible for having the right to share them with us and to send them invoices, estimates and reminders.

When your client uses Invoizr through a link you sent:

• Opening an invoice or estimate: we record that it was viewed, and when, so we can tell you (“read receipts”).
• Emails: invoices, estimates, receipts and reminders are sent by our email provider, Brevo, from “your business via Invoizr”. Brevo tells us whether each email was delivered, opened or bounced, using a small image in the email. Clients can turn off reminders with the link in any reminder email.
• Approving an estimate: we record the name they type, their signature if asked for, the time, their IP address and browser type, as a record of the approval for both of you.
• Paying: card, Apple Pay, Google Pay and bank payments are handled by Stripe. Payment details go straight to Stripe and are never stored by Invoizr. We receive the payment’s amount, status and method (such as card or bank transfer).

Clients who want to see, correct or delete their information should contact the business that invoiced them. We’ll help that business respond, and clients can also write to us at support@invoizr.com.

4. How we use it

• To provide the Service: create and send invoices and estimates, make PDFs, send reminders and receipts, take payments, show reports, and sync your data between your devices.
• To run your account and plan, including free trials, renewals and plan limits.
• To send you service messages: alerts you’ve turned on, the daily summary (you can turn it off), and important notices about your account, security or these policies.
• To give support when you ask for it.
• To understand how Invoizr is used and improve it, from totals across all accounts and website visits.
• To keep the Service secure: prevent fraud and abuse, enforce our Terms of Service, and fix problems.
• To meet legal obligations, such as tax and accounting records for our own sales.

We don’t use your information or your clients’ information for advertising, and we don’t make decisions about you by automated means that have legal or similar effects.

If you’re in the European Economic Area or the UK, our legal bases are: performing our contract with you (running the Service), our legitimate interests (security, support, improving reliability, understanding how Invoizr is used), your consent (push notifications and phone permissions, which you can withdraw at any time), and legal obligations.

5. Who we share it with

We don’t sell personal information, and we don’t share it for targeted advertising. We share it only with:

These providers may use the information only to provide their services to us, under contracts that require them to protect it. Stripe, Apple and Google also have their own relationship with you when you use their services, under their own privacy policies.

We also share information:

• With the people you send to: your clients see the invoices, estimates and business details you send them.
• When the law requires it: to comply with a valid legal request, or to protect the rights, property or safety of our users, the public or Invoizr.
• If our business changes hands: in a merger, acquisition or sale of assets, under the same protections as this policy. We’ll tell you before your information becomes subject to a different policy.
• With your permission.

6. How long we keep it

• Your account, business details and what you create: for as long as you have an account, until you delete them.
• Alerts in your notification feed: 90 days.
• Records of emails we sent for you (delivered, opened, bounced): 180 days.
• Daily backups: 30 days, then they’re deleted.
• Technical logs: kept by our hosting provider for a limited time, normally 30 days.
• Error reports: up to 90 days.
• Daily website visit totals: these hold nothing about any visitor, so we keep them.

When you delete your account, your information is removed from our live systems straight away and from backups within 30 days. We may keep a limited record where the law requires it, such as records of payments to Invoizr. Stripe, Apple and Google keep their own records under their own policies.

7. Deleting your account

You can delete your account and all its data at any time:

• In the app: More › Delete account.
• On the web: sign in at app.invoizr.com/settings/account and choose Delete account.
• By email: write to support@invoizr.com from the address on your account, and we’ll delete it within 30 days.

Deleting your account deletes your business, clients, invoices, estimates, payment records, expenses, photos, signature and sign-in, and cancels a plan bought on the web. Links you’ve sent to clients stop working. It can’t be undone, so download any PDFs or reports you need first.

Plans bought in the app: only you can cancel an App Store or Google Play subscription. Cancel it in your phone’s subscription settings before deleting your account, or Apple or Google will keep charging you. Your Stripe account for online payments is separate; you can close it with Stripe.

8. Your choices and rights

• See and change your information: everything you’ve entered is in the app, where you can edit it.
• Take a copy: download invoices and estimates as PDFs, and export reports as CSV files. Ask us for anything else.
• Notifications: turn push alerts, email alerts and the daily summary on or off in Notifications settings (More › Notifications in the app, Settings › Notifications on the web).
• Delete: see section 7.

Depending on where you live, including California, Texas and other US states, and the European Economic Area and the UK, you may have the right to know what personal information we hold about you, to get a copy, to correct it, to delete it, to object to or restrict how we use it, and to withdraw consent. Residents of US states can opt out of the sale or sharing of personal information and targeted advertising; we don’t do either, and we treat a Global Privacy Control signal as an opt-out anyway. We won’t treat you differently for using these rights.

To make a request, email support@invoizr.com or call 210-549-8696. We’ll check it’s you, usually by asking you to write from the email on your account, and answer within 45 days. You can use an authorized agent, who’ll need your signed permission. If we turn down your request, you can appeal by replying to our answer; we’ll respond within 60 days. If you’re in the EEA or UK, you can also complain to your local data protection authority.

9. Security

Information travels encrypted (HTTPS) and is stored encrypted by Google Cloud. Access rules let only your signed-in account read your business’s data, and deleting an account needs a recent sign-in. Card details are handled by Stripe, which is certified to PCI DSS Level 1, and never touch our servers. No system is perfectly secure; if a breach affects your information, we’ll tell you as the law requires.

10. Children

Invoizr is a business tool for people 18 and older. It isn’t directed to children, and we don’t knowingly collect information from anyone under 13 (or under 16 in the EEA and UK). If you think a child has given us information, email us and we’ll delete it.

11. Where your data is stored

Invoizr stores data in the United States. If you use it from another country, your information is transferred to the United States, where privacy laws may differ from yours. Where the law requires it, we rely on safeguards such as the European Commission’s standard contractual clauses for these transfers.

12. Changes to this policy

If we change this policy, we’ll post the new version here and update the date at the top. If a change is significant, we’ll also tell you by email or in the app before it takes effect.

13. Contact us

Questions or requests about privacy: