Privacy Policy

InvoiceFlow ("we", "us", "our") is an online invoicing and receipting platform for freelancers and businesses. Our registered contact email is info@invoiceflow.techieszon.com.

This Privacy Policy explains what personal data we collect, how we use it, and your rights in relation to it.

We collect data in two ways — data you give us directly and data generated automatically when you use InvoiceFlow.

Data you provide

• Account data: your name, email address, and password (hashed, never stored in plain text).
• Business profile: business name, logo, address, phone, website, tax ID, and default settings you configure in Settings.
• Client data: names, email addresses, phone numbers, and billing details of clients you add to InvoiceFlow.
• Invoice and receipt data: line items, amounts, dates, payment records, and notes on documents you create.
• Billing data: subscription status and plan. Payment card details are handled entirely by Paystack — we never see or store your card number.

Data generated automatically

• Usage data: pages visited, actions taken, and features used — to improve the product.
• Log data: IP address, browser type, device, and timestamps of requests to our servers.
• Cookies: session cookies to keep you logged in and preference cookies to remember your settings. See Section 7 for details.

• To create and manage your account and provide the InvoiceFlow service.
• To process payments and manage your subscription via Paystack.
• To send invoices and receipts to your clients on your behalf (Pro and Business plans).
• To send you transactional emails: account verification, password reset, payment confirmations, and overdue reminders.
• To improve and develop InvoiceFlow based on how it is used.
• To comply with legal obligations.

We do not use your data for advertising, and we do not sell your data to any third party.

We share data only with the services required to operate InvoiceFlow:

• Paystack — payment processing and subscription billing. Paystack Privacy Policy ↗
• Neon (PostgreSQL) — our cloud database provider where your account and document data is stored.
• Vercel — our hosting provider. Your data passes through Vercel's infrastructure.
• SMTP email provider — used to send emails to you and your clients. Email content may pass through this service.

All third parties are required to handle your data in accordance with applicable data protection laws.

We retain your data for as long as your account is active. If you delete your account:

• Your personal data (name, email, business profile) is deleted within 30 days.
• Invoice and receipt records may be retained for up to 7 years to comply with financial record-keeping regulations, after which they are permanently deleted.
• Audit log entries (Business plan) — a record of actions taken in your account such as creating invoices, recording payments, and managing team members — are retained for 12 months and then automatically and permanently deleted.

Depending on where you live, you may have the following rights:

• Access: request a copy of all data we hold about you.
• Correction: ask us to correct inaccurate data.
• Deletion: request deletion of your account and personal data (Settings → Danger Zone, or email us).
• Export: download all your invoices, receipts, and client data in CSV format from Settings → Data Export.
• Object: object to us processing your data for legitimate interests.
• Portability: receive your data in a machine-readable format.

To exercise any right, contact us at info@invoiceflow.techieszon.com. We will respond within 30 days.

We use the following types of cookies:

• Essential cookies: required for you to log in and stay logged in. These cannot be disabled without breaking the service.
• Preference cookies: remember your settings (e.g. currency preference). These expire after 30 days.

We do not use advertising or tracking cookies. You can manage cookie preferences using the banner shown on your first visit.

We take reasonable technical and organisational measures to protect your data, including:

• Passwords are hashed using industry-standard algorithms (bcrypt).
• All data is transmitted over HTTPS (TLS 1.2+).
• Database access is restricted to authorised InvoiceFlow infrastructure.

No method of transmission over the internet is 100% secure. If you become aware of any security issue, please contact us immediately at info@invoiceflow.techieszon.com.

InvoiceFlow is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice within InvoiceFlow. Continued use of the service after changes constitutes acceptance of the updated policy.

For any privacy-related questions or requests:

• Email: info@invoiceflow.techieszon.com
• Or use the contact form