Privacy Policy

We collect the minimum data we need to run an invoicing tool. We don't sell it. We don't run ads. We don't share it with anyone unless legally required to.

• Account info: name, email, hashed password.
• Organization info: business name, base currency, settings you configure.
• Your invoicing data: invoices, line items, clients, products, templates, recurring schedules, payment links.
• Audit log: what you did and when, scoped to your organization, used to provide the in-app audit trail.
• Technical data: minimal request logs (IP, user-agent, timestamp) to keep the service running and investigate abuse.

Only to operate Invcly for you: render your dashboard, send your invoices, generate PDFs, accept payments, and keep the audit trail you expect.

Your data is stored in a Postgres database hosted with our infrastructure provider. PDFs and uploaded assets are stored in Cloudflare R2.

No one, except service providers we need to run the product (hosting, email delivery, payments). We don't sell or rent your data. We don't use it to train AI models.

We use a single first-party session cookie to keep you logged in. On our public marketing pages (landing, about, contact, legal) we also load Google Analytics (GA4) to measure visits and improve the site. Google Analytics is not loaded inside the Invcly app once you sign in, and it is not loaded on invoice pages we send to your clients.

You can export, correct, or delete your data at any time from account settings. Where the GDPR or similar laws apply, you also have the right to lodge a complaint with your local data protection authority.

We keep your data for as long as your account is active. If you delete your account, we remove your data within 30 days, except where law requires us to retain certain records (e.g. tax documents).

Invcly is not directed at children under 16.

If we materially change this policy, we'll notify you by email or in the app at least 14 days before the change takes effect.

Questions or data requests? Get in touch.