Skip to content
Invoxa

Privacy Policy

Last updated:

Invoxa is a small software business. We collect only what we need to run the service, we never sell your data, and you can ask us to delete it at any time. This page explains the details in plain English.

1. Using the generator without an account

You can create and download invoices without signing up. In that case the invoice you are editing is saved only in your own browser (local storage) so you don't lose your work. PDFs are generated for you to download; we do not keep a copy of anonymous invoices on our servers.

2. Information we collect when you create an account

  • Account details: your name, email address and a securely hashed password.
  • Business profile: details you choose to add, such as business name, address, tax ID, logo and default invoice settings.
  • Invoices and clients: the invoices you save and the client contact details you enter on them.
  • Usage and technical data: basic server logs (such as IP address, browser type and timestamps) used for security, debugging and abuse prevention.

When you add a client's details, you are responsible for having a lawful reason to share them with us, which is normally the business relationship you are invoicing for. We process that data only on your behalf.

3. How we use your information

  • To provide the service: saving invoices, generating PDFs, and showing your dashboard.
  • To send emails you ask for (for example invoices and payment reminders to your clients) and essential account emails such as password resets and billing receipts.
  • To keep the service secure, prevent fraud and fix problems.
  • To understand, in aggregate, which pages and features are used so we can improve them.

We do not sell your personal data, and we do not use your invoices or client data for advertising.

4. Payments

Paid plans are sold through Lemon Squeezy, which acts as our merchant of record. Lemon Squeezy processes your payment details, calculates sales tax or VAT, and issues your receipts. We never see or store your full card number. We receive limited information such as your subscription status, plan and the email used at checkout. Lemon Squeezy's own privacy policy applies to the data they process.

5. Email delivery

Emails (such as invoices you send to clients, reminders and password resets) are delivered through a third-party SMTP email provider. That provider processes the recipient address and message content only to deliver the email.

6. Cookies and analytics

  • Session cookie: when you log in, we set a single secure, httpOnly cookie named “session” to keep you signed in. It is strictly necessary and is not used for tracking.
  • Local storage: the free generator stores your draft invoice in your browser so you can come back to it.
  • Analytics: we may use a privacy-friendly, cookieless analytics tool that counts page views without building personal profiles or tracking you across other websites.

We do not use advertising or cross-site tracking cookies.

7. Sharing your information

We share data only with service providers that help us run Invoxa, such as:

  • Hosting and database providers that store the service's data.
  • Lemon Squeezy, for payments and subscription management.
  • Our SMTP email provider, for sending emails.

These providers may only use your data to provide their service to us. We may also disclose information if required by law or to protect the rights and safety of our users and the service.

8. Data retention and deletion

We keep your account data for as long as your account is active. You can delete invoices and clients at any time. If you want your account deleted entirely, email us and we'll remove your personal data within 30 days, except where we must keep certain records (for example billing records) for legal or accounting reasons.

9. Security

Passwords are hashed, connections are encrypted with HTTPS, and access to production systems is restricted. No system is perfectly secure, so please use a strong, unique password.

10. Your rights

Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Email us to make a request and we'll respond within 30 days. You can also complain to your local data protection authority.

11. Children

Invoxa is a business tool and is not intended for children under 16.

12. Changes and contact

If we make material changes to this policy we'll update the date above and, where appropriate, notify you by email. Questions? Contact us at farrukhtahir5@gmail.com. See also our Terms of Service.