Back to home

Privacy Policy

How we protect your business data, client information, and invoicing records.

Last updated: 2026-10-30

1. Introduction and Our Privacy Commitment

At Invoice Number Generator (accessible at invoicenumbergenerator.com), we respect the confidentiality of your commercial transactions. This Privacy Policy outlines our principles and practices regarding the collection, use, and protection of information when you access our website, invoice generator, and associated subscription services.

Our Core Privacy Principles:

  • No Data Selling: We do not sell, rent, monetize, or trade your personal data, business contact information, or client records to any third parties.
  • No Advertising Profiling: We never inspect your invoices or line items to build behavioral or advertising profiles.
  • No AI Training on User Data: We do not feed your invoices, client lists, or pricing structures into public or private AI training models.

2. Anonymous Invoicing (Local-First Operation)

When you use our invoice generator without signing into a registered account:

  • Client-Side Only Processing: All calculations, line-item modifications, vector layouts, and PDF exports are performed entirely within your web browser using JavaScript.
  • Local Storage: Your working draft and sequential numbering state are stored solely within your device's browser localStorage.
  • Zero Server Uploads: In anonymous mode, your draft data, business name, client address, tax IDs, and pricing information are never transmitted to or stored on our backend servers.

3. Information We Collect from Registered Users

When you choose to register an account or subscribe to a paid tier (Starter or Pro), we collect and store:

  • Account Credentials: Your email address, encrypted password hash (or federated OAuth identifier if using Google Sign-In), and account creation timestamps.
  • Invoicing Data: Saved invoice drafts, completed invoices, client directory entries, and saved item/pricing libraries that you explicitly save to your cloud account.
  • Subscription & Transaction Records: Order identifiers, subscription tiers, renewal dates, and payment status returned by our payment processing partner. We do not collect or store credit card numbers or bank account credentials on our servers.

4. Payment Boundaries & Customer Settlement Funds

  • Platform Subscription Payments: Subscription billing for our software is processed securely through Waffo (or backup certified merchant processors).
  • Client Payments Between You and Your Customers: We provide software convenience features (such as configuring your own PayPal.Me or Stripe Payment Link so a "Pay Now" button appears on your invoice). We do not process, custody, hold, or intermediate funds transferred between you and your clients. Payments made by your clients flow directly into your own merchant accounts.

5. Security & Data Isolation

We implement rigorous technical safeguards to protect cloud-saved data:

  • Strict User Isolation: All cloud-stored invoices, clients, and items are partitioned strictly by user_id at the database level.
  • Non-Enumerable View Tokens: When you email an invoice through our system, the recipient views the invoice via a high-entropy, cryptographically secure URL token (/invoice/:token) that cannot be guessed, enumerated, or discovered by web crawlers.
  • Encrypted Transmission: All communications between your browser and our servers utilize TLS 1.3 encryption.
  • Log Sanitation: Our application and server logs do not store plaintext client email addresses or exact billing transaction amounts.

6. Data Retention, Downgrade Grace Period, and Deletion

  • Active Subscriptions: Cloud records remain stored securely in your account as long as your subscription or account remains active.
  • Cancellation & Downgrade Grace Period: In accordance with our service terms, when a paid subscription expires or is canceled, paid features are paused, and existing cloud-saved invoices and client records enter a 90-day read-only retention period. During these 90 days, you can log in at any time to view and download PDFs of your past records.
  • Deletion Notice: Seven (7) days prior to the expiration of the 90-day retention period, we send a courtesy email reminder. Upon completion of 90 days without resubscription, cloud data is permanently purged from our active databases.
  • On-Demand Erasure: You may request the immediate deletion of your account and all associated cloud data at any time by contacting our support team.

7. Your Statutory Rights (GDPR & CCPA/CPRA)

Depending on your jurisdiction, you have statutory rights regarding your personal information:

  • Right of Access & Portability: Request an export of your stored personal and invoicing data.
  • Right to Rectification: Update or correct inaccurate account details.
  • Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your stored records.
  • Right to Restrict or Object to Processing: Request that we halt specific data processing operations.

8. Cookies and Analytics

We use essential cookies strictly necessary for session authentication, theme preferences, and security verification. Optional site performance metrics are collected using privacy-respecting analytics that do not track users across external third-party websites.

9. Contact Us

If you have questions regarding this Privacy Policy, your stored data, or data privacy requests, please contact our Data Protection Officer: