Privacy Policy

The short version

• Guest mode stores nothing on our servers. An invoice you make without signing in stays in your browser.
• Signed in, we store what you put into your account — your business profile, customers, items, invoices, quotes and payments — to run the service for you. You can export it or delete it at any time.
• We don't sell or share your personal information, and the app at app.invoicenative.com has no ads, no third-party trackers and no session recording. The website at invoicenative.com uses Google Analytics to count visits, which you can switch off.

Who we are

Invoice Native ("we", "us") runs invoicenative.com (the website) and app.invoicenative.com (the app). Questions about this policy or your data: admin@invoicenative.com.

What we collect

When you use guest mode

Nothing you type is sent to us. The invoice or quote is kept in your browser's local storage so it's still there when you come back, and the PDF is made in your browser. Clearing your browser data deletes it; we can't recover it.

When you sign in

• Your sign-in identity. With Google or Apple: an account identifier, your name and your email address (with Apple, this can be a private relay address); we never see a password. With an email address and password: your email address and a salted, one-way hash of your password (Argon2id). We never store the password itself, never log it and can't read it back. The links we email you to confirm your address or reset your password are stored only as a hash, work once and expire (24 hours to confirm, 30 minutes to reset).
• Your business profile: business name, address, email, phone, website, tax ID (optional), logo, and your invoice defaults.
• What you create: customers (names, contact details, addresses), items, invoices, quotes, and payments you record.
• Payment details you add to your invoices, such as a bank account number or a payment handle. Bank account numbers are encrypted and shown masked.

You decide what goes into your invoices, including details about your customers. You're responsible for having the right to use their information this way.

Automatically

• Server logs: the IP address, time, page or API address (without its query string), response status and browser type of each request. We use them to keep the service running and secure.
• A security history of sensitive changes in your account (for example, a payment recorded or bank details changed). It stores a one-way keyed hash of the IP address, never the address itself.
• Your country: when you open invoicenative.com or the app, we guess your country to show your country's home page and start a new invoice in your country. We weigh three things: the country your IP address belongs to (our server looks it up in a copy of DB-IP's database kept on our own server), your device's time zone and your browser's preferred languages. On the website your browser passes the time zone to our server in the in_tz cookie, which is deleted when you close your browser. We use these only for that visit, never send your address anywhere and never store your country on our servers. Choosing a country yourself always wins. IP Geolocation by DB-IP, licensed under CC BY 4.0.
• Product statistics: counts of how often features are used — for example, "a PDF was downloaded with the Modern template" — added up per day with no account, device or IP address attached. We never record what you type. To count returning guests, your browser remembers the date of your last guest invoice and tells us only "new" or "returning" on your first one each day. If you came from our website, we also count which page you came from (for example "the plumbing invoice template").
• Website statistics: invoicenative.com — not the app — uses Google Analytics to count visits: the pages you view, the page you came from, and your approximate location, browser and device type, tied to a random identifier stored in a cookie. It doesn't see anything you type into the app. Google signals and ad personalization are switched off, so this data isn't used for advertising. In the EU/EEA, the UK and Switzerland no analytics cookies are set unless you give consent. If you opt out on Do Not Sell or Share, or your browser sends Global Privacy Control, Google Analytics isn't loaded at all.

We don't use cookies or similar technology to track you in the app. The cookies we use are described in our Cookie Notice.

How we use it

• To provide the service: sign you in, save and show your documents, number your invoices, and produce your reports and exports.
• To keep it secure: prevent abuse, investigate problems and protect your account.
• To improve it, using the product and website statistics above.
• To contact you about your account or important changes to the service.
• To meet legal obligations.

We don't use your data to profile you, and we don't use the content of your invoices for advertising.

Who processes it

• Amazon Web Services hosts the servers and database, in the United States. Its email service (Amazon SES) sends our account emails — confirming your address, resetting or changing your password — and receives your email address and the message to deliver it. We don't track whether you open these emails or click their links.
• Google and Apple sign you in, if you choose them. They receive the request to sign in to Invoice Native.
• State tax agencies: when you ask for the sales tax rate of a Washington or California address on an invoice, we send that street address, city and ZIP code — nothing else — to the Washington Department of Revenue or the California Department of Tax and Fee Administration, which publish the rates. We keep the rate they return for the quarter, under a one-way code made from the address, not the address itself.
• Google Analytics (Google LLC) receives the website statistics described above, as our service provider. Google keeps this data for up to 14 months. It's used only on invoicenative.com, never in the app.
• Advertising on the website: invoicenative.com may show ads on its guide pages. No ad network is active today; before one is, this policy and the consent choices on the website will be updated. The app never shows ads.

We may disclose information if the law requires it, to protect the rights and safety of our users or the public, or as part of a merger or sale of the service (in which case this policy continues to apply to your data).

How long we keep it

• Your account data is kept while your account is open.
• When you delete your account, you're signed out everywhere and your data is permanently deleted 30 days later. You can cancel the deletion by signing in during those 30 days.
• Backups are encrypted and kept for up to 35 days, so deleted data leaves our backups within 35 days of its deletion.
• Email sign-ups that are never confirmed are deleted 7 days after sign-up. Used and expired email links are deleted within a day.
• Account emails are kept in our sending queue for 7 days after they're sent, then deleted. If an address bounces or marks our email as spam, we keep it on a do-not-send list so we don't email it again.
• Server logs are kept for 14 days.
• Product statistics contain no personal information and are kept as long as they're useful.
• Website statistics in Google Analytics are kept for up to 14 months.

Your choices and rights

• Access and export: download all your data as CSV files, and your invoices as PDFs, from Settings → Export.
• Correction: change your business profile and documents in the app. Issued invoices are locked so your records stay accurate; you can void and replace them.
• Deletion: delete your account from Settings → Account.
• California residents have the right to know, access, correct and delete their personal information, to opt out of its sale or sharing, and not to be discriminated against for using these rights. We don't sell or share personal information as those terms are defined by California law. See Do Not Sell or Share My Personal Information.
• Global Privacy Control: we treat a GPC signal from your browser as a request to opt out of sale and sharing.
• Do Not Track: we don't track you across other websites, so there's nothing to change when your browser sends a Do Not Track signal.
• Website statistics: opt out on Do Not Sell or Share, send Global Privacy Control, block cookies, or use Google's opt-out browser add-on.

To make a request we can't handle in the app, email admin@invoicenative.com from the address on your account. We'll respond within 45 days.

Children

Invoice Native is a tool for businesses and is not directed at children under 16. We don't knowingly collect personal information from them.

Security

Connections are encrypted (HTTPS), sessions use secure HTTP-only cookies, bank account numbers are encrypted at rest, and backups are encrypted. No system is perfectly secure; if a breach affects your personal information, we'll tell you as the law requires.

Changes to this policy

The version and effective date are at the top of this page, and the changes are listed below. If a change materially affects how we use your personal information, we'll tell signed-in users in the app before it takes effect.