Privacy Policy

Last updated: March 2026

At Invokwik, your privacy matters. This policy explains what information we collect, how we use it, and what rights you have over your data. We have tried to keep this as clear and readable as possible — no walls of legalese.

1. Information We Collect

When you use Invokwik, we collect the following types of information: Account Information. When you register, we collect your name, email address, and password. If you subscribe to a paid plan, we collect billing information through our payment processor (Stripe) — we do not store your full credit card details on our servers. Invoice and Business Data. We store the invoices, receipts, client details, sender information, templates, and other business data you create within the platform. This data is yours and is used solely to provide the service. Usage Data. We collect information about how you interact with the service, including pages visited, features used, invoices created, and emails sent. This helps us improve the product and monitor system performance. Device and Log Data. We automatically collect your IP address, browser type, operating system, and referring URLs when you access the platform.

2. How We Use Your Information

We use the information we collect to: - Provide, maintain, and improve the Invokwik service - Process your transactions and send related information (e.g., payment confirmations) - Send invoices and receipts to your clients on your behalf - Respond to your support requests and communications - Monitor usage patterns and system performance to improve reliability - Detect, prevent, and address technical issues and abuse - Comply with legal obligations We do not sell your personal information to third parties. We do not use your business data for advertising purposes.

3. Data Storage and Security

Your data is stored securely using Supabase, which provides enterprise-grade infrastructure built on top of Amazon Web Services (AWS). All data is encrypted in transit using TLS and at rest using AES-256 encryption. We implement appropriate technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. These measures include: - Encrypted database connections - Row-level security policies ensuring users can only access their own data - Regular security audits and monitoring - Secure authentication with email verification While we take every reasonable precaution, no method of electronic storage is 100% secure. We encourage you to use a strong, unique password for your account.

4. Third-Party Services

We use the following third-party services to operate Invokwik: Stripe processes all subscription payments and billing. When you subscribe, your payment information is handled directly by Stripe under their privacy policy. We receive only a tokenised reference and basic transaction details — never your full card number. Resend handles transactional email delivery, including invoices and receipts sent to your clients. Email addresses and document attachments are transmitted to Resend solely for delivery purposes. Supabase provides our database infrastructure, authentication, and file storage. Your business data is stored in Supabase's managed PostgreSQL databases. Each of these providers maintains their own privacy policies and security certifications. We select partners who meet high standards for data protection.

5. Your Rights

You have the following rights regarding your personal data: Access. You can view and export your data at any time from within the application. Correction. You can update your account and business information directly in your settings. Deletion. You can request deletion of your account and all associated data by contacting us at support@invokwik.com. We will process deletion requests within 30 days. Data Portability. You can export your invoices and receipts as PDF documents at any time. Objection. If you believe we are processing your data unlawfully, you have the right to object and to lodge a complaint with your local data protection authority.

6. Cookies

Invokwik uses essential cookies that are strictly necessary for the service to function. These include: - Authentication cookies to keep you signed in during your session - Preference cookies to remember your settings (e.g., theme preference) We do not use advertising cookies, tracking pixels, or third-party analytics cookies. We do not participate in cross-site tracking or behavioural advertising.

7. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will notify you by email or through a notice in the application. We encourage you to review this page periodically to stay informed about how we protect your data.

8. Contact

If you have questions about this Privacy Policy or our data practices, please contact us at: Email: support@invokwik.com We aim to respond to all privacy-related enquiries within 5 business days.