Privacy policy

Who we are

Invoiste ("we", "us") makes an invoicing app and website for small businesses at invoiste.com. This policy covers the Invoiste website, the free invoice generator, the web app at invoiste.com/app, and the Invoiste mobile app.

What we collect

Your account

Your email address and a password. We never store your password as you type it. We store a salted, one-way hash of it (PBKDF2-SHA256), so nobody at Invoiste can read it.

Your business information

What you put into the app: your business name, address, phone and email; your logo; your clients (name, phone, email, address, and how they found you); invoices, estimates, jobs and expenses; notes; photos and receipts you attach; your drawn signature; and the answers you give in the welcome questions (type of work, yearly revenue range, how you heard about us). We keep this so you can use it on your phone and on the web.

Your clients' signatures

If you send an estimate for signing, the page your client opens shows the estimate. When they sign, we store their typed name, their drawn signature, and the time, and give it to you.

Emails we send you

We send short emails with a 6-digit code to confirm your email address and to reset a forgotten password. These are sent through Cloudflare Email Service.

The assistant

If you use the assistant, the message you type or say, and a short summary of your account (client names, unpaid invoice numbers and totals, open estimates and jobs), are sent to Anthropic, the company that makes the Claude AI model, so it can answer and prepare the actions you asked for. Anthropic processes this under its commercial API terms. The assistant only creates drafts and changes in your own account. Do not include information in assistant messages that you do not want processed this way.

The free invoice generator

The invoice you type into the free generator stays in your own browser. It is not sent to us or stored on our servers. To enforce the 3 free invoices limit, our server keeps a random invoice number and a count tied to your internet address (IP address) for 30 days.

The waitlist and support messages

If you join the waitlist we store your email address so we can tell you when Invoiste is ready. If you write to us through the support page, we receive the name, email and message you enter.

Technical information

Like any website, our servers see your IP address and basic request information. We use this to keep the service secure, to limit abuse (for example, too many sign-in attempts), and to run the free-invoice limit. We may use privacy-friendly analytics from Cloudflare to count visits. We do not use advertising trackers.

Cookies and storage on your device

• Sign-in cookie. When you sign in on the website, we set a secure cookie that keeps you signed in. It cannot be read by scripts on the page.
• Your device's storage. The web app keeps a copy of your data, your appearance choice (light, dark, or auto), and drafts in your browser so it works quickly. The phone app keeps your data on the phone and your sign-in token in the phone's secure storage.

How we use your information

• To provide Invoiste: create documents, sync them between your devices, send the PDFs you ask for, and run the assistant when you use it.
• To keep your account secure, confirm your email, and respond to support requests.
• To improve the product and understand which features people use.
• To tell you when Invoiste is ready, if you joined the waitlist.

We do not sell your personal information, and we do not use your invoices or client details for advertising.

Who we share it with

We share information only with the companies that help us run Invoiste, and only as needed:

• Cloudflare, which hosts our website, database, file storage and email sending.
• Anthropic, only when you use the assistant (see above).
• Authorities, if the law requires it, or to protect the safety and rights of our users and of Invoiste.
• A buyer, if Invoiste is ever sold or merged, in which case this policy would continue to apply to your data.

When you send an invoice or share a signing link, the people you send it to see what you put in it. That is up to you.

Where it is stored and how it is protected

Your data is stored on Cloudflare's infrastructure, in the United States and other places where Cloudflare operates. Connections to Invoiste use HTTPS. Passwords are stored as hashes. We limit sign-in attempts and sign-in codes to slow down guessing. No system is perfectly secure, so please use a strong password that you do not use elsewhere.

How long we keep it, and deleting your data

We keep your data while your account is open. You can delete your account at any time: in the phone app go to More, then Account & sync, then Delete account; on the web go to Settings, then Delete account. This permanently deletes your account, your records, your sign-ins, and the pictures you uploaded. It cannot be undone. Waitlist emails and support messages can be removed on request.

Your choices and rights

You can see and edit your information in the app, delete your account, and ask us for a copy of your data or to correct or delete it. Depending on where you live (for example, California or the European Economic Area), you may have additional rights, such as to object to certain processing. We will respond to verified requests as the law requires. Contact us through the support page.

Children

Invoiste is for businesses and adults. It is not meant for anyone under 18, and we do not knowingly collect information from children. If you think a child has given us information, tell us and we will delete it.

Changes to this policy

If we change this policy in a meaningful way, we will update the date at the top and, where it makes sense, tell you in the app or by email.

Contact us

Questions about this policy? Use the support page and choose to write to us. We read every message.