InvoiceSnap Privacy Policy
[Operator] ("we") runs InvoiceSnap (the "Service"). We never ask for your name or phone number and process only what the Service needs.
1. What we process
| Category | Data | When |
|---|---|---|
| Anonymous account | A random user ID, a system-generated placeholder email (not yours), sign-in token and expiry, browser or device info (User-Agent) | Created automatically on first use |
| Email (optional) | The email you enter to restore purchases or sign in on another device, whether it was verified, and service-email send and unsubscribe records | When you request a sign-in link |
| AI auto-fill input | Pasted notes or email text (may include client names, emails, addresses and amounts) | When you ask for AI auto-fill |
| Usage records | Time, count and cost of AI/upload use; app events (opens, screens, feature use, paywall views, errors); app version, platform, country (estimated from the IP, which is not stored); random install and session IDs | While you use the service |
| Abuse prevention | A daily value that represents your network (a keyed one-way transform of the IP, never the IP) and that day's counts of new accounts, free uses, reports and sign-in links | On sign-up, free use, reports and sign-in links |
| Purchases | Product ID, subscription status and expiry, Paddle subscription, customer and transaction IDs. Paddle, the Merchant of Record, handles your card directly; we never receive it. | From the payment provider when you buy, renew, cancel or get a refund |
2. Why
- To create and keep your anonymous account and restore purchases
- To provide creating invoices and saving them as PDFs, and AI auto-fill from pasted notes or emails
- To enforce free, trial and paid limits and prevent abuse
- To improve the Service and fix errors (statistics)
- To send service emails to email accounts: a welcome, a reminder about 2 days before a free trial ends, and a come-back email 7 days after a subscription ends (promotional). Every email has an unsubscribe link that stops them at any time.
3. Data that stays on your device
Invoices, client lists, your logo and history stay in your browser (localStorage) and are not sent to our server. It is not sent to our server and is removed when you clear the app's or browser's data.
4. AI features
- AI input text is used only to extract invoice fields, processed in server memory and not stored.
- AI inputs are sent to our processors (OpenRouter and model providers) with zero-retention and no-training settings.
- AI inputs are never put in event or error logs.
5. Retention
- Account, purchase status, usage records and this Service's server data: deleted immediately when you use "Delete my data". Sign-in sessions expire after one year without use.
- Service-email send and unsubscribe records: deleted with your account; trial-reminder and come-back send records are deleted automatically after at most 180 days.
- Abuse-prevention values: deleted automatically after at most 2 days.
- Usage events: kept up to 1 year.
- Transaction records the law requires us to keep are kept for the legal period.
- How data is destroyed: when the retention period ends or you ask for deletion, we delete it without delay from our database and file storage so it cannot be restored. We keep no paper records.
6. Processors and international transfers
We use the processors below. Their servers are outside Korea, so data is transferred abroad over encrypted connections (HTTPS) when you use the Service.
| Recipient (contact) | Country | Data | Purpose | Retention |
|---|---|---|---|---|
| Cloudflare, Inc. (contact: dpo@cloudflare.com) | USA and data centers worldwide | Account, purchase/subscription state, usage records, this app's server-side data, requests in transit | Servers, database, file storage | Until account deletion or end of contract |
| Cloudflare, Inc. (Email Service) (contact: dpo@cloudflare.com) | USA and others | Email address, sign-in link, service email content | Sending restore sign-in emails and service emails | Per Cloudflare's policy after sending |
| OpenRouter, Inc. and the AI model providers it routes to (e.g. DeepSeek model hosts) (contact: privacy@openrouter.ai) | USA and others | AI feature input | Generating AI results | Deleted after processing (zero-retention setting) |
| Paddle.com Market Limited and affiliates (our online reseller and Merchant of Record for every web order) (contact: privacy@paddle.com) | UK, USA and others | Email, country and postcode, payment details (your card or other payment method is collected and handled by Paddle directly), user ID, product | Web orders and payments, sales tax/VAT, subscription management, refunds and order support | Per law and Paddle's privacy policy |
| Tinybird, Inc. (contact: legal@tinybird.co) | USA (data stored in the operator account's region: USA or EU) | Usage events | Usage statistics and error analysis | Up to 1 year from collection |
Legal basis: Article 28-8(1)(iii) of Korea's Personal Information Protection Act (outsourcing and storage needed to perform our contract with you, disclosed in this policy). When and how: each time you use the Service, over encrypted connections (HTTPS).
7. Your rights
- You can ask to access, correct, delete or stop the processing of your data at any time.
- "Delete my data" in Settings deletes your account and server data immediately. Cancel a web subscription in "Manage subscription" first.
- For anything else, contact [Contact].
8. Children
The Service is not directed at children under 14 (under 13 in the US). They may use it only with a parent's consent.
9. Security
- HTTPS everywhere
- Sign-in tokens stay in your browser's storage for this site
- Least-privilege server access and separately stored secrets
- Daily limits and rate limits per feature
10. Cookies and tracking
We use your browser's storage (localStorage) to keep you signed in and, after an email sign-in, a sign-in cookie on our server's domain. We use no advertising or tracking cookies.
11. Contact
Privacy contact: [Operator] · [Contact]
12. Changes
We announce changes in the Service or on this page at least 7 days before they apply (30 days for important changes).