Privacy Policy
Last updated: August 2026
1. Data we collect
Account information: When you create an account, we store your email address, name, and password (encrypted). If you sign in via Google, we store your Google ID and profile information.
Invoices and clients: When you create invoices or save clients while logged in, this data is stored in our database. When not logged in, all data stays in your browser only.
Billing: If you subscribe to a paid plan, we store your subscription status and plan. Payment processing is handled by Stripe — we never see or store your card number.
2. How we use your data
We use your data to provide the Invoala service: generating invoices, managing your account, processing payments, and sending transactional emails (verification, password resets, team invitations).
We do not sell your data. We do not use your data for advertising. We do not track your invoice content for any purpose beyond providing the service.
3. Data storage
Your data is stored on secure servers. We use SQLite as our database engine with encrypted connections. Backups are performed regularly.
When you use Invoala without logging in, your invoice data is stored only in your browser's local storage and never reaches our servers.
4. Cookies
We use a single session cookie (invoala_session) to keep you signed in. This cookie is HTTP-only, expires after 30 days, and is not used for tracking.
5. Third-party services
- Payment processor — billing and subscription management
- Resend — transactional email delivery
- Google OAuth — optional sign-in (if configured)
6. Your rights
You can request deletion of your account and all associated data at any time from your dashboard settings. You can also export your data by downloading your invoices as PDFs.
7. Contact
For privacy-related questions, email us at hello@invoala.com.