Privacy Policy

Overview

InvoiceQuickly ("we", "our", "us") respects your privacy and is committed to protecting the personal data you share with us. This policy explains what information we collect, how we use it, and your rights regarding that data.

Information We Collect

• Account information: Name, email address, and password when you create an account.
• Invoice data: Client names, addresses, line items, amounts, and payment terms you enter when creating invoices.
• Payment information: Subscription billing is processed through Stripe. Your clients pay invoice links through the Stripe or PayPal account you connect. We store payment status and provider references, not card numbers.
• Usage data: Pages visited, features used, and session duration to improve our product.
• Cookies: Essential cookies for authentication and optional analytics cookies (with your consent). Analytics uses Google Analytics, loaded through Google Tag Manager. Its cookies are set only after you accept, and you can change your choice at any time under Cookie preferences in the footer. If you accept, a first-party cookie (iq_analytics_consent) records that choice, and our server reports three events to Google Analytics using only Google's anonymous browser ID: a completed sign-up, your first saved invoice, and a paid plan purchase with its plan and amount. No names, email addresses or invoice contents are sent.

AI Processing and Connected Services

AI features send the input needed for your request to OpenAI through its API. This can include the work description you enter, optional audio for transcription, receipt images or text for expense extraction, and selected financial summaries for report insights. Review your input before submitting it and avoid including information the task does not need. We do not store audio recordings or uploaded receipt images in our application after processing.

OpenAI describes its default API training and retention practices in its API data controls documentation. Its default abuse-monitoring retention can apply. We do not claim a custom zero-retention agreement.

When you connect QuickBooks Online, Xero, a time tracker or Zapier, we store the credentials and connection information needed to provide that integration. An accounting export sends the customer and invoice information you select to your connected accounting organization. Imports read the work records you request. A Zap or API key can access the data allowed by its scopes. These providers also apply their own terms and privacy policies.

Invoice and account emails are delivered through Postmark or EmailIt, depending on the configured service. They receive the recipient address, message and any attached invoice PDF. Delivery, open and link-click events may be returned to InvoiceQuickly so the sender can check delivery activity.

How We Use Your Data

• To provide and improve InvoiceQuickly services.
• To generate invoices and process your requests.
• To send transactional emails (invoice delivery, payment confirmations).
• To communicate product updates and security notices.
• To detect and prevent fraud or abuse.

What We Do NOT Do

• We do not sell your personal data to third parties.
• We do not share your invoice data with advertisers.
• We do not train our own AI models using your invoice content.

Data Security

InvoiceQuickly is hosted in the United States and uses HTTPS for browser connections. Database connections require TLS in production. Stored credentials for connected payment providers are encrypted with AES-256-GCM; this does not mean that all invoice and client data is encrypted by the application. Invoice PDFs are generated on demand and are not stored as PDF files.

We do not claim a specific TLS version, an encryption-at-rest standard for invoice and client records, or HIPAA compliance. Do not use InvoiceQuickly for patient or insurance billing that includes protected health information.

Data Retention

Account and invoice records remain stored while your account is active. To request access, correction, export or deletion, contact privacy@invoicequickly.com. We review requests against account ownership and applicable retention requirements. Deletion from active application records, backups and connected providers can follow different processes; we will explain the scope and timing that apply to your request. We do not promise an automatic 30-day deletion process. Some records may need to be retained to meet legal or accounting obligations.

Your Rights

Depending on your location, you may have the right to: access your data, correct inaccuracies, delete your data, export your data, or restrict processing. To exercise these rights, contact us at privacy@invoicequickly.com.

Contact

For privacy-related questions, reach us at privacy@invoicequickly.com.