We believe in transparency. Here's exactly how we collect, use, and protect your information.
At Invoist, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
When you create an account, we collect information you provide directly, including:
To provide our invoicing and business management services, we store the data you enter, including:
When you subscribe to a paid plan, payment processing is handled by our third-party payment processors. We do not store your full credit card number or cryptocurrency wallet details on our servers. We may receive and store limited payment information such as:
We automatically collect certain information when you use our service, including:
We use the information we collect to:
We process your personal data based on the following legal grounds:
Processing necessary to provide our services to you, including account management, invoicing features, expense tracking, document storage, and customer support.
Processing for our legitimate business interests, including analytics to improve our service, security monitoring, fraud prevention, and service optimization. We balance these interests against your rights and freedoms.
Where we rely on your consent (such as for marketing communications), you may withdraw consent at any time by updating your preferences or contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal.
Processing required to comply with legal obligations, such as maintaining financial records, responding to lawful requests from authorities, or meeting regulatory requirements.
We do not sell your personal information. We may share your information in the following circumstances:
We work with third-party service providers who help us operate our service, including:
These providers are contractually obligated to protect your information and use it only for the services they provide to us.
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
If Invoist is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
If you use Invoist to process personal data of individuals located in the European Economic Area (such as your clients' information) and require a Data Processing Agreement (DPA) to comply with GDPR, please contact us at support@invoist.app to request one.
If you connect an AI assistant such as ChatGPT to your account, Invoist sends it the information it needs to answer your requests: your account name and default currency, and the clients, invoices, tracked time and expenses you ask about or create. The assistant's provider (for ChatGPT, OpenAI) processes that information under its own terms and privacy policy, including whether it may be used to improve their models, which you control in your ChatGPT data settings. Invoist keeps a record of which tools were used, when, and whether they succeeded; we do not store your messages to the assistant or what it sends back. You can disconnect an assistant at any time in Settings → Connected apps, which ends its access immediately.
We implement appropriate technical and organizational measures to protect your personal information, including:
While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your data within 90 days, except where we are required to retain it for legal, accounting, or reporting purposes.
Depending on your location, you may have certain rights regarding your personal information:
Request a copy of the personal data we hold about you
Request correction of inaccurate or incomplete data
Request deletion of your personal data
Request a copy of your data in a machine-readable format
Object to certain types of processing
Request that we limit how we use your data
Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at support@invoist.app. We will respond to your request within 30 days.
If you are located in the European Economic Area (EEA), you also have the right to lodge a complaint with your local data protection supervisory authority if you believe your privacy rights have been violated.
We use cookies and similar technologies to:
You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our service.
Your information may be transferred to and processed in countries other than your own, including Singapore (application hosting) and the United States (email delivery and file storage). These countries may have different data protection laws than your country of residence.
For transfers from the European Economic Area (EEA), United Kingdom, or Switzerland to countries not recognized as providing adequate data protection, we rely on:
You may request more information about the safeguards we use by contacting us at support@invoist.app.
Invoist is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:
Request disclosure of the categories and specific pieces of personal information we collect about you
Request deletion of your personal information, subject to certain exceptions
Opt out of the sale of your personal information (note: we do not sell personal information)
We will not discriminate against you for exercising any of your CCPA rights
To exercise these rights, contact us at support@invoist.app. We will respond to verifiable requests within 45 days.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
If you have any questions about this Privacy Policy or our data practices, please contact us: