Privacy Policy

1. Introduction

We are committed to protecting your privacy and handling your data responsibly. By using InvoiceAI, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information we collect

We collect information you provide directly and information generated through your use of the Service:

• Account information: email address, name, and profile details when you register via our authentication provider.
• Uploaded content: invoices, receipts, and related files you upload for parsing, including extracted metadata and line-item data produced by our AI pipeline.
• Payment information: billing-related data processed by our payment partner (we do not store full card numbers on our servers).
• Session and usage data: authentication session tokens, IP address, browser type, pages visited, and actions taken within the Service for security and operations.

3. How we use information

We use your information to:

• Provide, operate, and improve the InvoiceAI Service.
• Parse and extract data from your uploaded documents using AI.
• Manage your account, credits, and payment transactions.
• Send service-related communications (e.g., account or billing notices).
• Detect, prevent, and address fraud, abuse, and security issues.
• Comply with legal obligations and enforce our Terms of Service.

4. Third-party services

We use trusted third-party providers to run the Service. They process data only as needed to perform their functions:

• Clerk — user authentication and account management.
• Dodo Payments — payment processing for credit purchases.
• Cloudflare R2 — secure storage of uploaded invoice and receipt files.
• Anthropic (Claude) — AI-powered parsing and data extraction from your documents.
• Neon (PostgreSQL) — database hosting for account, invoice, and transaction records.
• Vercel — application hosting and delivery of the Service.

Each provider maintains its own privacy policy. We encourage you to review their policies for details on how they handle data.

5. Data storage & security

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), access controls, and secure cloud infrastructure. Uploaded files are stored in private object storage; database access is restricted to authorized systems only.

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data retention

We retain your account data and uploaded documents for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data by contacting us. We may retain certain information where required by law or for legitimate business purposes (e.g., payment records, fraud prevention).

7. Your rights

Depending on your location, you may have rights under applicable privacy laws, including the EU General Data Protection Regulation (GDPR), the California Online Privacy Protection Act (CalOPPA), and the California Consumer Privacy Act (CCPA), such as:

• Access to the personal data we hold about you.
• Correction of inaccurate or incomplete data.
• Deletion of your personal data, subject to legal exceptions.
• Restriction or objection to certain processing activities.
• Data portability where technically feasible.
• Opt-out of sale or sharing of personal information (we do not sell your data).

To exercise these rights, contact us at amanshah7886@gmail.com. We will respond within a reasonable timeframe as required by law.

8. Cookies

We use essential session cookies and similar technologies to keep you signed in and operate the Service. We do not use advertising or third-party tracking cookies for marketing purposes. You can control cookies through your browser settings, but disabling essential cookies may affect functionality.

9. Children's privacy

InvoiceAI is not intended for anyone under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will delete it promptly.

10. Contact

For privacy-related questions or requests, contact us at: amanshah7886@gmail.com