taxInvoice.appPrivacy policy
Short version: your invoices, receipts, clients and business details stay in your browser unless you turn on account sync. If you sign in, we store your email, your credit balance and purchases. There are no passwords. We also store random IDs to unlock paid downloads.
1. Who we are
taxInvoice.app (taxinvoice.app) provides invoice generators, calculators and guides. Contact: contact page.
2. Data that stays on your device
Everything you type into a generator (your details, customers, items, amounts, drafts, saved documents, logo and signature) is processed and stored in your browser's local storage. It is not sent to our servers unless you turn on account sync (section 3). Clearing your browser data deletes it.
3. Data we store on our servers
| Data | Why | Kept for |
|---|---|---|
| Random invoice ID and its paid status | To unlock the footer-free download you paid for | Up to 24 months |
| Account: email address | To sign you in and hold your credits | Until you ask us to delete your account |
| Credit balance and credit history | To track purchased and used credits | While your account exists |
| Sign-in session (a random token in an HttpOnly cookie) | To keep you signed in | 30 days or until you sign out |
| Sign-in requests: your email, a hashed link token and a hashed 6-digit code | To send and check your sign-in link or code, and to limit how many are sent | Expire after 15 minutes; records deleted within 30 days |
| Payment ID, plan, amount and currency from our payment provider | To apply each payment once and for accounting | Up to 7 years |
| Synced documents, clients and item list, only if you turn on sync in your account | To open your documents on other devices | Until you turn sync off and ask us to delete it, or delete your account |
| Your approximate country (from your IP address, not stored) | To show prices in your local currency | Not stored |
Invoice IDs are random and do not contain your name or invoice contents.
4. Payments
Payments are processed by Dodo Payments, acting as merchant of record. They collect your payment and billing details under their own privacy policy. We never see your full card details.
5. Cookies and analytics
We use one essential cookie (the sign-in session) only if you sign in. We do not use advertising or tracking cookies. If we add privacy-friendly, cookie-free analytics, it will be listed here.
6. Email
We only email you sign-in links and codes when you ask for them. Emails are sent through Cloudflare Email Service. No marketing email without your consent.
7. Your rights
Depending on where you live (for example under GDPR, the UK GDPR, India's DPDP Act or Australia's Privacy Act) you may ask us to access, correct or delete your account data. Because invoice data stays on your device, you can delete it yourself at any time.
8. Changes
We will update this page and its date when this policy changes.