Privacy Policy

Last updated: October 19, 2025

This Privacy Policy describes how Invoice Builder ("we", "us", or "our") collects, uses, and protects your information when you use our free invoice builder service.

Introduction

At Invoice Builder, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our free invoice builder service.

By using our service, you agree to the collection and use of information in accordance with this policy. We will not use or share your information with anyone except as described in this Privacy Policy.

If you have any questions about this Privacy Policy, please contact us at the information provided at the end of this document.

Information We Collect

Personal Information

When you use our invoice builder, we may collect the following personal information:

  • Name and Contact Information: Your name, email address, phone number, and mailing address
  • Business Information: Company name, business type, tax identification numbers
  • Client Information: Information about your clients that you include in invoices
  • Account Information: Username, password, and other registration information
  • Payment Information: Payment method details (if applicable for future premium features)

Usage Information

We automatically collect certain information about your use of our service:

  • Device Information: IP address, browser type, operating system, device identifiers
  • Usage Data: Pages visited, features used, time spent on the service
  • Log Data: Access times, pages viewed, app crashes, and other system activity
  • Location Information: General location based on IP address (not precise GPS data)

How We Use Your Information

We use the collected information for the following purposes:

  • Provide and Maintain Service: To operate and maintain our invoice builder service
  • Create and Manage Invoices: To generate, store, and manage your invoices
  • Account Management: To create and manage your user account
  • Customer Support: To respond to your inquiries and provide technical support
  • Service Improvement: To analyze usage patterns and improve our service
  • Communication: To send you important updates, newsletters, and marketing communications (with your consent)
  • Legal Compliance: To comply with legal obligations and protect our rights
  • Security: To detect, prevent, and address security threats and fraudulent activity

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • With Your Consent: When you explicitly agree to share information
  • Service Providers: With trusted third-party service providers who assist in operating our service (under strict confidentiality agreements)
  • Legal Requirements: When required by law, court order, or government regulation
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • Protect Rights: To protect our rights, property, or safety, or that of our users or the public
  • Aggregate Information: Anonymous, aggregated data for analytics and research purposes

Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. The retention periods are as follows:

  • Account Data: Retained while your account is active and for up to 3 years after account deletion
  • Invoice Data: Retained for 7 years for tax and legal compliance purposes
  • Usage Data: Retained for up to 2 years for analytics and service improvement
  • Communication Data: Retained for up to 3 years for customer service purposes

You can request deletion of your data at any time, subject to legal and legitimate business requirements.

Your Rights and Choices

Under GDPR (EU Users)

If you are located in the European Union, you have the following rights:

  • Right of Access: Request information about the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to Restriction: Request limitation of processing of your personal data
  • Right to Data Portability: Request a copy of your data in a structured format
  • Right to Object: Object to processing based on legitimate interests or direct marketing
  • Right to Withdraw Consent: Withdraw consent for processing at any time

Under CCPA (California Users)

If you are a California resident, you have the following rights:

  • Right to Know: Request information about data collection and usage
  • Right to Delete: Request deletion of your personal information
  • Right to Opt-Out: Opt-out of the sale of personal information (we do not sell data)
  • Right to Non-Discrimination: Right to equal service regardless of privacy choices

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

Essential Cookies

Required for the service to function properly:

  • Authentication: Keep you logged in during your session
  • Security: Protect against fraudulent activity
  • Preferences: Remember your settings and preferences

Analytics Cookies

Help us understand how users interact with our service:

  • Usage Analytics: Track page views and user behavior
  • Performance: Monitor service performance and identify issues
  • Improvement: Gather feedback to improve user experience

You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect service functionality.

Data Security

We implement comprehensive security measures to protect your personal information:

  • Encryption: All data is encrypted in transit (HTTPS) and at rest
  • Access Controls: Strict access controls and authentication requirements
  • Regular Audits: Periodic security audits and vulnerability assessments
  • Monitoring: Continuous monitoring for suspicious activity
  • Backup Security: Secure backup systems with encryption
  • Employee Training: Regular security training for all employees

While we use industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your jurisdiction.

When we transfer your information internationally, we ensure appropriate safeguards are in place:

  • Adequacy Decisions: Transfers to countries deemed adequate by the European Commission
  • Standard Contractual Clauses: Approved contractual clauses for data transfers
  • Certification Schemes: Participation in approved certification programs
  • Binding Corporate Rules: Internal policies approved by data protection authorities

Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make material changes to this policy, we will:

  • Update the "Last updated" date at the top of this policy
  • Notify you via email (if we have your email address)
  • Post a notice on our website
  • Provide an in-app notification for active users

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email

privacy@invoicebuilder.com

Response Time

We respond to all privacy inquiries within 30 days

For data protection inquiries from EU residents, you also have the right to lodge a complaint with your local data protection authority.