Privacy
What this covers
SimpleInvoice has two halves. The public pages, which anyone can read without an account, and the application, which you reach by signing in. They are treated differently and this page says how.
What the application stores
When you create an account we store your name, your email address and a hash of your password. We never store the password itself. Everything you then create, your organisations, clients, invoices, estimates, templates and uploaded files, is stored so the service can show it back to you.
Your data is yours and is not sold, rented or shared with advertisers. Every query the application makes is scoped to your account, so one account cannot read another’s records.
Who can read your invoices
We can. Your invoices, clients and figures are stored so the service can show them back to you, and that means the people running it are technically able to read them. We do not, we do not sell or share them, and every query is scoped to your account so no customer can read another’s. But we would rather say plainly what is true than imply a guarantee we are not making.
Some earlier accounts encrypt their client details in the browser, so those particular records genuinely cannot be read here. That is not how new accounts work: it made a forgotten password unrecoverable, and the cost outweighed the benefit for most people.
Shared invoice links
When you create a link to send a client, that link contains a long random token and anyone holding it can view that one document without signing in. Treat it as you would the invoice itself. Those pages are never indexed by search engines and never carry advertising.
Advertising on the public pages
The public pages do not currently carry advertising. If that changes, this page will say so, and advertising will remain confined to the public pages: never inside the application and never on a shared invoice link.
Measurement
We count page views on the public pages, so we can tell which guides and designs people find useful. It is cookieless and does not build a profile of a visitor. Pages inside your account are excluded before anything leaves your browser: a path like the one for a single invoice would say when you work and how often, and that is not ours to collect.
Cookies
The application sets one cookie, which keeps you signed in. It is not used for tracking or advertising. Signing out clears it.
The mailing list
If you give us your address on one of the guide pages, it is added to a mailing list held by Resend, our email provider, and used to send new guides. It is used for nothing else. Creating an account does not put you on this list, because agreeing to use a product is not agreeing to be emailed about it.
Every message carries an unsubscribe link, one click removes you, and we do not add anyone back. If you would rather not wait for the next email, ask us and we will take you off.
We send email you ask us to send: an invoice to a client, or a reminder about an overdue one. We do not sell your address.
Deleting your data
You can delete organisations, invoices and uploaded files from within the application at any time. To delete your account entirely, write to us and we will remove it and everything attached to it.
Getting in touch
Questions about any of this, or about a specific piece of data, can go to the address on the invoices you receive from us.