Privacy Policy

This Privacy Policy explains how Yevhen Sabadash, a sole proprietor registered in Ukraine (ФОП Сабадаш Євген Олександрович), individual tax number (RNOKPP) 3741604230 (“Invoicee”, “we”, “us”, or “our”) collects, uses, and protects personal data when you use the Invoicee website at getinvoicee.com, our mobile application, and related services (together, the “Service”).

For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR, and the Ukrainian Law “On Personal Data Protection”, we are the data controller of the personal data described in this policy, except where stated otherwise (see Section 4).

Contact: Yevhen Sabadash, Nauky ave 60, Kyiv 03083, Ukraine. Email: evgen.sabadash1337@gmail.com.

This policy covers the marketing website at getinvoicee.com and the Invoicee mobile application on the App Store, including your account, invoicing, templates and related features.

It does not cover third-party services we link to, which have their own privacy policies.

Account data. When you create an account, we collect your email address and an authentication identifier. We support Sign in with Apple and email sign-in; if you use Sign in with Apple, you may choose to hide your real email and Apple provides us a relay address.

Business and account content (synced to our servers). Your business profile, the clients you save, your invoice templates, and the documents you upload to Invoice Vision so it can build a template from them.

Invoices (stored on your device). The invoices you create are generated and stored locally on your device. We do not keep copies of your finished invoices on our servers.

Data about your own clients (invoice recipients). Names, addresses, email addresses, and tax/registration identifiers you enter to bill your clients. See Section 4 for the distinction in roles for this data.

Feedback data (website). If you send feedback from the website we collect your email address and your message.

Support communications. If you contact us, we keep your messages and contact details.

Technical and usage data. Device type, operating system, app version, IP address, and basic interaction/diagnostic data needed to run and secure the Service.

We do not intentionally collect special-category data (e.g. health, biometric, political data) and ask that you do not enter it into the Service.

When you use Invoicee to bill your clients, you enter personal data about those clients. For that client data, you are the data controller and Invoicee acts as a data processor on your behalf - we process it only to provide the invoicing service to you, under your instructions.

You are responsible for having a lawful basis to process your clients’ data and for informing them as required by law. Where GDPR requires it, our processing of this data is governed by a Data Processing Agreement (DPA).

We rely on the following legal bases under GDPR Article 6:

Creating and managing your account and providing the Service, and generating and sending your invoices - performance of a contract (Art. 6(1)(b)).

Sending you a reply when you write to us through the website feedback form - consent (Art. 6(1)(a)).

Securing the Service, preventing abuse, and debugging - legitimate interests (Art. 6(1)(f)).

Meeting tax, accounting, and legal obligations - legal obligation (Art. 6(1)(c)).

Responding to your support requests - legitimate interests / performance of a contract.

You can withdraw consent at any time without affecting processing that already happened.

Invoice Vision is the only AI feature in the app. You upload an invoice document you already have - PDF, JPG, PNG or DOCX - and we send it to our AI provider, OpenAI, which reads it and returns a reusable template: the layout, the columns, the currency, the payout details and your wording. Nothing is uploaded unless you pick a file. The website does not use OpenAI.

Pro accounts can also translate a saved template into another language, which sends the template text to OpenAI in the same way.

The document you upload can contain personal data about you and your client, because that is what an invoice is. Only upload documents you are entitled to share. We use the OpenAI API and do not permit your content to be used to train OpenAI’s models.

We do not sell your personal data. We share it only with service providers (“sub-processors”) who help us run the Service, under contracts that require them to protect it:

Supabase - database, authentication, and storage for the app, and storage of website feedback submissions. Hosted in the EU (Ireland, eu-west-1); underlying infrastructure runs on Amazon Web Services (AWS).

Cloudflare, Inc. - hosting, CDN, and edge compute for the website (getinvoicee.com).

OpenAI - Invoice Vision in the app only; processes the invoice documents you upload, and template text you ask us to translate, to return a template (United States). See Section 6.

Apple - Sign in with Apple, App Store distribution, and in-app purchases.

RevenueCat - managing in-app subscriptions and purchase status (United States).

We do not currently use a transactional email provider; feedback submissions are stored in Supabase and are not sent through an email service. We may also disclose data where required by law, to enforce our terms, or to protect our rights and users.

Your account and business data are stored in the EU (Ireland). Some sub-processors are located in the United States - OpenAI (app AI drafting), RevenueCat (in-app purchases), and Cloudflare (website edge) - so international transfers occur for those features.

Where we transfer personal data outside the EU, the UK, or Ukraine, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework.

The website uses only the cookies strictly necessary for it to function. We do not use analytics or advertising cookies, and we do not track you across other sites. If we add analytics in the future, we will update this section and ask for consent where required.

We keep personal data only as long as needed for the purposes above.

Account and business data on our servers (profile, saved clients, templates): when you close your account, we initiate deletion or anonymization within 30 days.

Invoices: stored on your device, not on our servers - removing them is in your control via the app.

Documents uploaded to Invoice Vision: processed to build your template and not retained by OpenAI for training. The template that results is stored with your account until you delete it.

Feedback messages: kept as long as needed to address your feedback. Support messages: 24 months. Technical logs: 90 days.

Some financial records may need to be retained for longer where tax or accounting law requires it. Because your invoices live on your device, responsibility for keeping records for tax purposes rests with you; records of purchases and subscriptions are held by Apple, not by us.

We apply technical and organizational measures appropriate to the risk, including encryption of data in transit and at rest, strict per-account data isolation enforced by row-level security so users cannot access each other’s data, and access controls for our systems. We do not log sensitive identifiers such as tax IDs.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Subject to applicable law, you have the right to: access the personal data we hold about you; correct inaccurate data; delete your data (“right to be forgotten”); restrict or object to certain processing; receive your data in a portable format; withdraw consent at any time; and lodge a complaint with a supervisory authority.

To exercise any of these rights, email evgen.sabadash1337@gmail.com. We will respond within the timeframe required by law.

EU/EEA users may complain to their local Data Protection Authority. UK users may complain to the Information Commissioner’s Office (ICO). Ukrainian users may complain to the Ukrainian Parliament Commissioner for Human Rights (Ombudsman).

The Service is intended for freelancers and businesses and is not directed to anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy from time to time. We will post the updated version here and change the “Last updated” date. For material changes, we will provide additional notice where required.

Questions about this policy or your data: ФОП Сабадаш Євген Олександрович - evgen.sabadash1337@gmail.com.