Privacy Policy
Last updated: March 2026 · createinvoices.net
1. Introduction
This Privacy Policy describes how CreateInvoices.net ("we", "us", or "our") collects, uses, and protects your information when you use our invoice generator — available at createinvoices.net and as a mobile application ("the Service"). By using the Service, you agree to this policy.
2. Information We Collect
We collect only what is necessary to operate the Service: • Invoice data you enter: business name, address, client name, line items, amounts. Stored temporarily (anonymous) or linked to your account. • Account data from OAuth providers (GitHub or Google): your name, email address, and profile image. We never receive or store passwords. • Profile data you optionally add: company name, logo, phone number, address. Used to pre-fill invoices. • Usage analytics: pages visited, device type, and approximate location via anonymised IP — collected by Umami in a cookie-free, GDPR-compliant manner. • Session cookies: to keep you logged in. No advertising or tracking cookies are used.
3. How We Use Your Information
We use your data exclusively to: • Generate, save, and let you download invoices. • Authenticate your account via GitHub or Google. • Pre-fill invoice fields from your saved profile. • Remember your preferences (template, colour scheme, theme). • Analyse aggregate, anonymised usage to improve the Service. We do not use your data for advertising, profiling, or any form of targeted marketing. We do not sell your data to any third party, ever.
4. Data Retention
• Anonymous invoices (no account): automatically deleted 7 days after creation. • Account invoices: retained until you delete them or close your account. • Profile data (name, email, company info): retained until you request deletion. • OAuth tokens: retained only as long as your account exists.
5. Data Storage & Security
All data is stored in a PostgreSQL database with encryption at rest and in transit (TLS 1.2+). We apply industry-standard access controls and host on Vercel infrastructure. While we take reasonable precautions, no internet transmission is 100% secure.
6. Third-Party Services
We use the following third-party services: • GitHub OAuth & Google OAuth — authentication only. Subject to their own privacy policies. • Umami Analytics — privacy-first, cookie-free, no personal data shared. • Google Tag Manager / Google Analytics — aggregate traffic only; IP anonymisation enabled. • Vercel — hosting provider. Subject to Vercel's privacy policy. We do not embed third-party advertising SDKs or share data with data brokers.
7. Mobile Application
The CreateInvoices mobile app connects to createinvoices.net APIs using the same account you create on the website. The app does not collect any additional data beyond what is described in this policy. No device identifiers, contacts, or location data are accessed.
8. Your Rights
You have the right to: • Access the personal data we hold about you. • Correct inaccurate data. • Delete your account and all associated data at any time — go to Settings → Delete Account, or email us. • Export your invoice data. • Lodge a complaint with your local data protection authority (if you are in the EU/EEA). To exercise any right, email: [email protected]. We respond within 30 days.
9. Children's Privacy
CreateInvoices is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided data, contact us and we will delete it immediately.
10. Changes to This Policy
We may update this policy periodically. The "Last updated" date below reflects the most recent revision. Continued use of the Service after changes constitutes acceptance of the revised policy.
11. Contact
Privacy questions, data requests, or account deletion: [email protected] createInvoices.net
Questions? Email us at [email protected]