Privacy Notice

Last updated: May 7, 2026

1. Who is the data controller

InvoiceFlow Pro is the data controller of personal data collected through the Service. Contact: support@invoiceflow.pro.

2. What we collect

Account data: email address, password (hashed), authentication provider (e.g. Google).
Profile & invoice content: business name, address, logo, client details, line items, notes you enter.
Subscription data: plan, status, billing period, customer ID from our payments processor (we do not store your full card number).
Usage data: IP address, device, browser, pages viewed, error logs.

3. How we use it

To operate, secure and improve the Service.
To process subscriptions, trials, renewals and refunds.
To send transactional emails (account confirmation, password reset, billing notices).
To meet legal, tax and accounting obligations.

4. Who we share it with

Paddle.com Market Limited — our Merchant of Record and payment processor, which receives your billing information to process subscriptions, taxes and refunds.
Lovable Cloud (Supabase) — our managed backend / database host, which stores account and subscription data on our behalf.
Google — only if you choose Sign in with Google, for the purpose of authenticating you.
Authorities, where required by law.

We do not sell your personal data.

5. International transfers

Data may be processed in the United States and the European Union by the providers above, under standard contractual clauses where applicable.

6. Retention

We keep account data while your account is active, and for a reasonable period afterwards to comply with legal and tax obligations. You can request deletion at any time.

7. Your rights

Subject to applicable law, you have the right to access, correct, delete, port or restrict processing of your personal data, and to lodge a complaint with your local data protection authority. Email support@invoiceflow.pro to exercise these rights.

8. Cookies

We use strictly necessary cookies / local storage to keep you signed in. We do not use third-party advertising cookies.

9. Changes

We will post material changes to this notice and update the date above.