Privacy Policy

Invoiceize ("we", "us", or "our") operates the website invoiceize.com (the "Service"), a free online tool for making invoices, receipts, quotes and pay stubs. This Privacy Policy explains what information the Service handles, where it is kept and the choices you have.

1. The Short Version

• You do not need an account to use the Service. Every feature works without one.
• Without an account, the invoices, receipts, quotes and pay stubs you create, your drafts and your Brand Kit are saved in your browser on your device, and we never receive them. Pay stubs may include employee pay details and the last four digits of a Social Security number (the editor never stores a full number).
• If you choose to log in, those documents are also saved to our cloud database so you can open them on your other devices. We use them only for that. We never sell or share them, never use them to train AI or target ads, and you can export or delete them at any time. Section 8 explains how.
• If you choose to use Scan & fill, the file or text you pick is sent to an AI model to read it into an invoice. It is used for that one request and not saved. Section 3 explains how.
• We use Google Analytics and Microsoft Clarity, including Clarity session recordings and heatmaps, to understand how the Service is used. Section 4 explains what they collect and how to block them.
• If you send us feedback, we receive your message and, if you give it, your email address.
• We do not sell your personal information and we do not show ads.

2. Documents Stored in Your Browser

Everything you type into the editor — business and client names, addresses, line items, amounts, notes, payment details and any logo you upload — is saved in your browser's local storage on the device you are using. This includes your current draft, a list of your recent documents and your Brand Kit. It lets you close the page and pick up where you left off.

• If you are not logged in, these documents never leave your browser and do not sync to other devices or browsers. If you are logged in, they are also synced to your account as described in Section 8.
• You can delete a single document from the My invoices page, or remove everything at once by clearing this site's data in your browser settings. Private or incognito windows discard it when you close them.
• We cannot recover documents that have been deleted or cleared.
• PDFs are created in your browser. When you download or print a document, the file goes to your device, and you decide who receives it.

3. Scan & Fill (Optional)

The editor can fill in an invoice for you from an existing document: a photo or screenshot, a PDF, or text you paste. This is the only feature that sends document content off your device, and it only happens when you use it.

• Images are resized in your browser first. For PDFs, your browser extracts the text of the first pages (or, for scanned PDFs, renders them as images). Only that content is sent.
• It goes through our server to an AI model provider, accessed via OpenRouter, which returns the invoice fields. The model provider processes it under OpenRouter's and its own terms.
• We use the content only to answer that request. We do not write it to a database or file storage, and we do not use it for anything else.
• To keep the feature free and prevent abuse, we count imports per IP address per day, and visitors who are not signed in may be asked to pass a Cloudflare Turnstile check.
• Don't import documents you are not allowed to share with a third-party service.

4. Analytics and Session Recordings

To see which pages and features people use and where they get stuck, the Service loads:

• Google Analytics — records pages visited, referring sites, approximate location, device and browser type, and events such as downloading a PDF or switching layouts. These events record settings like the layout or currency, not what you write on your invoice. Google processes this data under its own privacy policy.
• Microsoft Clarity — records how you interact with pages, including clicks, scrolling and mouse movement, and produces heatmaps and session recordings (replays of a visit). Recordings can include content shown on the page, which may include details you type into the editor. The pay stub editor, its download dialog and pay stub entries in your recent documents are masked in Clarity recordings, so employee names and pay are not captured. Microsoft processes this data under its own privacy statement.
• Our own page-view counter — records the page path, referring site, country, device and browser type, and a salted one-way hash derived from your IP address and browser so that we can count unique visitors. We do not store your IP address in this counter.

How to opt out: the editor works the same without analytics. You can block these tools with your browser's tracking protection or a content blocker, block third-party cookies in your browser settings, or install Google's Google Analytics opt-out add-on.

5. Feedback You Send Us

If you use the Feedback button, we receive the type of feedback you choose, your message, the page you sent it from and, only if you enter it, your email address so that we can reply. Feedback is handled by our own support service and is used only to answer you and improve the Service. Your IP address is used briefly to limit abuse of the form.

6. Hosting, Fonts and Logs

• Cloudflare hosts the Service. Like any web server, it processes your IP address and request details to deliver pages and protect the site from attacks, and may keep short-lived logs for security and troubleshooting.
• Google Fonts provides the typefaces. Your browser downloads them from Google, which receives your IP address as part of that request.

7. Cookies and Local Storage

• Local storage holds your drafts, recent documents and Brand Kit, as described in Section 2. It is not sent to us.
• Analytics cookies are set by Google Analytics and Microsoft Clarity to recognize repeat visits and link page views within a visit. Blocking them does not affect the editor.
• We do not use advertising cookies.

8. Optional Account and Cloud Sync

Logging in is optional. It adds one thing: your documents are saved to your account so you can open them on any device. There are no credits, no paid features and nothing else tied to the account.

• What we store. For your account: your email address, your name (or the name and profile picture from Google if you sign in with Google), a password hash if you use email and password, and login sessions with the IP address and browser they came from. For cloud sync: the documents you save (invoices, receipts, quotes and pay stubs, including any employee details on pay stubs), your current drafts, your Brand Kit, the last number you used for each document type, and the logos inside them.
• What we use it for. Only to keep your documents available on your devices. Our admin tools have no way to view synced documents, and we do not use them for AI training or advertising. We never sell them or share them with anyone, other than Cloudflare, which hosts our database. Note that the analytics described in Section 4, including Clarity session recordings, work the same whether or not you are logged in.
• How it is protected. Data travels over HTTPS. It is stored in a Cloudflare D1 database, which Cloudflare encrypts at rest. Only requests signed in to your account can read or change your documents. Logos are stored privately with your documents, not on a public link.
• The first time you log in on a device, we ask before saving the documents already in that browser to your account, and we tell you if any of them are pay stubs.
• Export and delete. In My invoices you can export everything in your cloud account as a JSON file, or delete all of it. Deleting removes it from our database immediately and from your other devices the next time they sync. Our database's disaster-recovery snapshots expire within 30 days; if we ever restore from one, we re-apply your deletion before the data is used again.
• Logging out. When you log out, that browser stops showing your account's documents. Use Log out and clear this device on a shared computer to remove the local copy as well.

9. Sharing

We share information only with the service providers named above (Cloudflare, which also hosts the cloud sync database; Google; Microsoft; and OpenRouter with its AI model providers when you use Scan & fill) so that they can provide their services to us, when required by law, or as part of a merger or sale of the Service. We do not sell or rent your personal information.

10. Retention

Documents in your browser stay there until you delete them or clear your browser data. Documents synced to your account stay until you delete them or your account; database snapshots expire within 30 days. Scanned content is not kept after the request completes; the daily import count per IP address is kept only for the current period. Feedback messages are kept for as long as we need them to answer and follow up. Analytics data is kept according to the retention settings of each provider.

11. Your Rights

Depending on where you live, you may have the right to access, correct or delete personal information we hold about you, or to object to or restrict how we use it. Without an account, what you create never reaches us. If you use cloud sync, you can export or delete your documents yourself in My invoices. For anything else we hold, such as your account or a feedback message, contact us at [email protected].

12. Children

The Service is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, contact us and we will delete it.

13. International Transfers

Our service providers may process information in countries other than your own, which may have different data protection laws.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the new version on this page and change the effective date above.

15. Contact Us

Questions about this Privacy Policy? Email us at [email protected].