Privacy policy

This policy explains what personal data invoicegenerators.net collects, why, who we share it with and the choices you have. The service is run by [Legal entity name], [Registered address], the controller of the personal data described here. Questions go to hello@invoicegenerators.net.

Using the free generator without an account

Everything you enter in the generator, including invoice and client details, line items, your business profile and your logo, is saved in your browser's local storage and IndexedDB on your device. The local history keeps your last 50 invoices, and the PDF is created by your browser. None of this is sent to us or to our analytics provider, so we can't see, recover or delete it for you. Clearing your browser data deletes it, so download a JSON backup of your invoice history if you need one.

To choose sensible defaults, the generator reads your browser's language setting and the approximate country that our hosting provider works out from your IP address. We use this only to preselect your country's currency, tax label and paper size.

Our hosting provider still logs basic request data, such as IP addresses, as listed below.

Analytics

We use Microsoft Clarity to see how people use our public pages, such as which links they click, how far they scroll and where they get stuck, shown as heatmaps and recordings of clicks, scrolling and mouse movement. We set it up so that:

• it runs with cookies turned off, so it doesn't set cookies or link your visits together, and each page view is recorded on its own
• the invoice generator, including the form and the live preview, is masked, so nothing you type or see there is sent to Clarity
• it isn't loaded on the sign-in and checkout pages, in the Pro app or on shared invoice links

Clarity is provided by Microsoft, which receives the data your browser sends with each request, such as your IP address and browser and device details, and processes it under the Microsoft Privacy Statement. You can stop it by blocking clarity.ms with a browser setting or content blocker.

We don't run advertising or use advertising or tracking cookies, so there is no cookie banner.

Accounts

You need an account only for Pro or to save invoices to the cloud. When you create one, we collect your email address and, if you sign in with Google, the name and profile image on your Google account. You sign in with a one-time link that we email to you through Resend, or with Google. We never ask for or store a password.

We set a strictly necessary session cookie to keep you signed in, plus short-lived security cookies during sign-in. They are not used for analytics or advertising.

If you choose to move your local invoice history into your account, those invoices are uploaded and stored as described below.

Data we store for Pro

When you use Pro, we store the following in our database, hosted on Cloudflare D1:

• your business profile: name, address, email, phone number, tax ID, default settings and payment instructions or links
• clients you save: names, email addresses, postal addresses, phone numbers and tax IDs
• saved items, invoices and each invoice's activity, such as when it was created, sent, viewed, reminded or paid
• your reminder settings and recurring invoice schedules

Logos you upload are stored in Cloudflare R2. When you send an invoice, or a recurring invoice is sent automatically, we create the PDF on our servers and email it through Resend to the recipients you choose. Payment reminders are sent through Resend too.

Each invoice you send has an online copy at a long, unguessable link, and those pages tell search engines not to index them. When someone opens the link, we record a "viewed" event with the date and time so you can see it in your invoice history. We don't put tracking pixels in our emails.

You are responsible for having a lawful reason to store your clients' details and send them invoices, and we process that data on your behalf to provide the service.

Billing

Pro subscriptions are sold and billed by Dodo Payments, which acts as merchant of record. Dodo Payments collects your payment details, charges any sales tax or VAT and issues your receipts, under its own privacy policy. We never see or store your full card number. We store your Dodo Payments customer and subscription IDs, your plan with its status and renewal date, and the billing events Dodo Payments sends us, such as a failed payment.

Hosting and service providers

These providers process personal data to run parts of the service:

• Cloudflare hosts the site and our database (D1), which holds account and Pro data, and stores uploaded logos in R2. Its logs include IP addresses and are kept for a short period.
• Resend delivers sign-in links, invoice emails, reminders and account notices.
• Dodo Payments handles billing as merchant of record, including your name, email, billing address and payment details.
• Microsoft provides Clarity analytics, run without cookies and with the invoice generator masked.
• Google provides optional sign-in and shares your name, email address and profile image with us.

We may also disclose information when the law requires it or to protect the service and its users from fraud or abuse. If the business is sold, this policy would continue to apply to your data.

Legal bases under UK and EU GDPR

• Contract: to run your account, provide Pro features and send the emails you ask us to send.
• Legitimate interests: to keep the service secure, prevent abuse, fix problems and understand how the site is used, including through Microsoft Clarity. You can object to this.
• Legal obligation: to keep billing and tax records and to respond to lawful requests.
• Consent: where we ask for it, which you can withdraw at any time.

Your rights

Depending on where you live, you can ask to access, correct or delete the personal data we hold about you, receive a copy in a portable format, or restrict or object to how we use it. Email hello@invoicegenerators.net from the address on your account and we will respond within one month. Data in the free generator is on your device and already under your control.

In the UK you can complain to the Information Commissioner's Office, and in the EU to your local data protection authority.

United States

We do not sell or share personal information, as those terms are defined in the California Consumer Privacy Act, as amended by the CPRA. We collect identifiers such as your email address, subscription details, server log data and the customer records you store in Pro, for the purposes in this policy. California residents can ask to know, correct or delete their personal information, and we will not treat you differently for doing so.

Australia, New Zealand and Canada

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988, the information privacy principles in New Zealand's Privacy Act 2020, and Canada's PIPEDA. You can ask to access or correct your information. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner, New Zealand's Office of the Privacy Commissioner or the Office of the Privacy Commissioner of Canada.

International transfers

Our providers may process data in the United States and other countries. When UK or EU personal data goes to a country without an adequacy decision, we rely on safeguards such as standard contractual clauses and the UK International Data Transfer Addendum, or on a provider's certification under the EU-US Data Privacy Framework and its UK Extension.

How long we keep data

• Free generator: we hold none of it. It stays in your browser until you clear it.
• Account and Pro data: kept while your account exists and deleted within 30 days of a request to delete your account.
• Billing records: kept for as long as tax and accounting law requires, even after an account is deleted.
• Server logs: kept by our hosting provider for a short period.
• Emails to us: kept for as long as we need them to deal with your message.

Children

invoicegenerators.net is a business tool and isn't directed at children. We don't knowingly collect personal information from anyone under 16. If you think a child has given us personal data, contact us and we will delete it.

Security

All traffic to invoicegenerators.net is encrypted with HTTPS, and access to account data is limited to what is needed to run and support the service. If you notice a security problem, please tell us promptly.

Changes to this policy

When we change this policy, we will update the date on this page. If a change materially affects how we use account data, we will email account holders before it takes effect.

Contact

[Legal entity name], [Registered address]. Email hello@invoicegenerators.net.