Privacy Policy - How Invoya Protects Your Data

1. Introduction

Welcome to Invoya. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our invoice generation service.

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide to us when you:

Register for an account
Use our invoice generation services
Make a purchase
Contact us for support

This information may include: name, email address, company information, billing information, and invoice data.

2.2 Automatically Collected Information

When you use our service, we automatically collect certain information about your device and usage patterns, including:

IP address and browser type
Operating system and device information
Pages visited and time spent on our service
Clickstream data and usage patterns

2.3 Payment Information

Payment processing is handled by Stripe. We do not store your complete credit card information. Stripe's privacy policy governs the use of your payment information.

3. How We Use Your Information

We use your information for the following purposes:

To provide and maintain our invoice generation service
To process your transactions and manage your account
To send you technical notices, updates, and support messages
To respond to your comments, questions, and customer service requests
To analyze usage patterns and improve our service
To detect, prevent, and address technical issues and fraudulent activity
To comply with legal obligations and enforce our terms

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our service, such as payment processors (Stripe), hosting providers, and analytics services. These providers are contractually obligated to protect your information.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe such action is necessary to comply with legal obligations or protect our rights.

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit using SSL/TLS
Encryption of sensitive data at rest
Regular security assessments and updates
Access controls and authentication mechanisms
Secure backup and disaster recovery procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. We will retain and use your information to comply with legal obligations, resolve disputes, and enforce our agreements. When we no longer need your information, we will securely delete or anonymize it.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

Access: You can request a copy of the personal information we hold about you
Correction: You can request that we correct inaccurate or incomplete information
Deletion: You can request that we delete your personal information
Portability: You can request a copy of your data in a structured, machine-readable format
Objection: You can object to our processing of your personal information
Restriction: You can request that we restrict the processing of your information

To exercise these rights, please contact us at support@invoya.com.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your activity on our service. Cookies are small data files stored on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

9. Third-Party Services

Our service integrates with the following third-party services:

Stripe: Payment processing (see Stripe's privacy policy)
OpenAI: AI-powered invoice data extraction (see OpenAI's privacy policy)

These third parties have their own privacy policies. We encourage you to review them.

10. Children's Privacy

Our service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have questions about this Privacy Policy, please email us at support@invoya.com