privacy policy

you can use the free creator with no account at all — your draft stays in your own browser, and generating and downloading invoices happens locally. if you create an account we store your email address and the invoices you choose to save. we don't sell your data, and we don't run ad trackers.

invoiceme is built by ogbuilds, a uk-based studio (ogbuilds ltd). ogbuilds ltd is the data controller for any personal data described here, and this policy is governed by uk data-protection law (uk gdpr and the data protection act 2018).

• account info. if you sign in, we store your email address and a verification timestamp. sign-in is passwordless — we never receive or store a password.
• your invoices.if you save an invoice to your account, we store the invoice document you authored (your details, your client's details, line items, tax, and totals). you control what goes in it.
• billing info. if you subscribe to pro, we store a stripe customer id, a subscription id, your subscription status, and the current period-end date. card details are handled entirely by stripe — we never see or store them.
• newsletter (optional).if you enter your email in the “stay in the loop” box, we add it to our mailing list. you can unsubscribe at any time.

we don't use third-party analytics or advertising trackers.

without an account, the draft you build is saved to your browser's local storage on your own machine — it never reaches our servers. generating and downloading a pdf, png, or word file happens locally too. clearing your browser storage removes the draft.

we use your data only to run the service: to sign you in, to save and reload the invoices you create, to bill and manage your pro subscription, and — if you opted in — to send you the newsletter. we never sell your data or share it for advertising.

we use a small set of trusted providers to run invoiceme:

• vercel — hosting and serving the app.
• neon — the postgres database where accounts and saved invoices live.
• stripe — subscription billing and payment processing.
• resend — sending sign-in (magic-link) emails and the newsletter.

we keep your account data while your account is active. if you cancel and ask us to delete it, we remove your saved invoices and personal data (we may retain limited billing records where the law requires). deleting your account cascades to your saved invoices.

under uk gdpr you can ask us to access, correct, delete, or export your data, and you can object to or restrict certain processing or withdraw consent. to make a request, reach us via the studio link below. you also have the right to complain to the uk ico.

data is encrypted in transit (https). sign-in is passwordless via single-use, expiring magic links, and payment card data never touches our servers — it's handled by stripe.

questions, or want to exercise your rights? reach out via ogbuilds, the studio behind invoiceme.