Privacy Policy

This Privacy Policy explains how Yevhen Sabadash, a sole proprietor registered in Ukraine (ФОП Сабадаш Євген Олександрович), individual tax number (RNOKPP) 3741604230 (“Invoicee”, “we”, “us”, or “our”) collects, uses, and protects personal data when you use the Invoicee website at getinvoicee.com, our mobile application, and related services (together, the “Service”).

For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR, and the Ukrainian Law “On Personal Data Protection”, we are the data controller of the personal data described in this policy, except where stated otherwise (see Section 4).

Contact: Yevhen Sabadash, Nauky ave 60, Kyiv 03083, Ukraine. Email: evgen.sabadash1337@gmail.com.

This policy covers the marketing website and waitlist (live now, pre-launch), and the Invoicee mobile application (account, invoicing, and related features) once available.

It does not cover third-party services we link to, which have their own privacy policies.

Account data. When you create an account, we collect your email address and an authentication identifier. We support Sign in with Apple and email sign-in; if you use Sign in with Apple, you may choose to hide your real email and Apple provides us a relay address.

Business and account content (synced to our servers). Your business profile, the clients you save, your invoice templates, and any notes you provide to the AI drafting feature in the app.

Invoices (stored on your device). The invoices you create are generated and stored locally on your device. We do not keep copies of your finished invoices on our servers.

Data about your own clients (invoice recipients). Names, addresses, email addresses, and tax/registration identifiers you enter to bill your clients. See Section 4 for the distinction in roles for this data.

Waitlist and feedback data (website). If you join a drop waitlist we collect your email address and, optionally, your country and role. If you send feedback from the website we collect your email address and your message.

Support communications. If you contact us, we keep your messages and contact details.

Technical and usage data. Device type, operating system, app version, IP address, and basic interaction/diagnostic data needed to run and secure the Service.

We do not intentionally collect special-category data (e.g. health, biometric, political data) and ask that you do not enter it into the Service.

When you use Invoicee to bill your clients, you enter personal data about those clients. For that client data, you are the data controller and Invoicee acts as a data processor on your behalf - we process it only to provide the invoicing service to you, under your instructions.

You are responsible for having a lawful basis to process your clients’ data and for informing them as required by law. Where GDPR requires it, our processing of this data is governed by a Data Processing Agreement (DPA).

We rely on the following legal bases under GDPR Article 6:

Creating and managing your account and providing the Service, and generating and sending your invoices - performance of a contract (Art. 6(1)(b)).

Adding you to a drop waitlist and notifying you - consent (Art. 6(1)(a)).

Securing the Service, preventing abuse, and debugging - legitimate interests (Art. 6(1)(f)).

Meeting tax, accounting, and legal obligations - legal obligation (Art. 6(1)(c)).

Responding to your support requests - legitimate interests / performance of a contract.

You can withdraw consent (e.g. leave the waitlist) at any time without affecting prior processing.

Invoicee uses AI to turn the notes you provide in the app into draft invoice line items. To do this, the relevant content you submit is sent to our AI provider, OpenAI, which processes it to return a draft. The website does not use OpenAI.

We use the OpenAI API and do not permit your content to be used to train OpenAI’s models. We do not send sensitive identifiers such as tax IDs to OpenAI beyond what is necessary for the draft you requested.

We do not sell your personal data. We share it only with service providers (“sub-processors”) who help us run the Service, under contracts that require them to protect it:

Supabase - database, authentication, and storage for the app, and storage of website waitlist and feedback submissions. Hosted in the EU (Ireland, eu-west-1); underlying infrastructure runs on Amazon Web Services (AWS).

Cloudflare, Inc. - hosting, CDN, and edge compute for the website (getinvoicee.com).

OpenAI - AI drafting in the app only; processes the invoice notes you submit to generate drafts (United States). See Section 6.

Apple - Sign in with Apple, App Store distribution, and in-app purchases.

RevenueCat - managing in-app subscriptions and purchase status (United States).

We do not currently use a transactional email provider; waitlist and feedback submissions are stored in Supabase and are not sent through an email service. We may also disclose data where required by law, to enforce our terms, or to protect our rights and users.

Your account and business data are stored in the EU (Ireland). Some sub-processors are located in the United States - OpenAI (app AI drafting), RevenueCat (in-app purchases), and Cloudflare (website edge) - so international transfers occur for those features.

Where we transfer personal data outside the EU, the UK, or Ukraine, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework.

The website uses only the cookies strictly necessary for it to function. We do not use analytics or advertising cookies, and we do not track you across other sites. If we add analytics in the future, we will update this section and ask for consent where required.

We keep personal data only as long as needed for the purposes above.

Account and business data on our servers (profile, saved clients, templates): when you close your account, we initiate deletion or anonymization within 30 days.

Invoices: stored on your device, not on our servers - removing them is in your control via the app.

Waitlist email: until you unsubscribe or the drop program ends.

Feedback messages: kept as long as needed to address your feedback. Support messages: 24 months. Technical logs: 90 days.

Some financial records may need to be retained for longer where tax or accounting law requires it. Because your invoices live on your device, responsibility for keeping records for tax purposes rests with you; records of any purchases or subscriptions are held by Apple (and, in future, Stripe), not by us.

We apply technical and organizational measures appropriate to the risk, including encryption of data in transit and at rest, strict per-account data isolation enforced by row-level security so users cannot access each other’s data, and access controls for our systems. We do not log sensitive identifiers such as tax IDs.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Subject to applicable law, you have the right to: access the personal data we hold about you; correct inaccurate data; delete your data (“right to be forgotten”); restrict or object to certain processing; receive your data in a portable format; withdraw consent at any time; and lodge a complaint with a supervisory authority.

To exercise any of these rights, email evgen.sabadash1337@gmail.com. We will respond within the timeframe required by law.

EU/EEA users may complain to their local Data Protection Authority. UK users may complain to the Information Commissioner’s Office (ICO). Ukrainian users may complain to the Ukrainian Parliament Commissioner for Human Rights (Ombudsman).

The Service is intended for freelancers and businesses and is not directed to anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy from time to time. We will post the updated version here and change the “Last updated” date. For material changes, we will provide additional notice where required.

Questions about this policy or your data: ФОП Сабадаш Євген Олександрович - evgen.sabadash1337@gmail.com.