Privacy Policy

1. Who We Are

Ez2Invoice is operated as an early-stage product. For all privacy-related inquiries, please contact us at edamrau@hotmail.com. We are the data controller for any personal information you provide through the platform.

2. Information We Collect

We collect the following categories of personal information:

• Account information: Name, business name, email address, and password when you register.
• Invoice and client data: Client names, email addresses, phone numbers, addresses, and financial details you enter when creating invoices or estimates.
• Payment information: Billing details processed securely through Stripe. We do not store card numbers on our servers.
• Usage data: Log files, IP addresses, browser type, pages visited, and timestamps for security and improvement purposes.
• Cookies: Small files stored in your browser to maintain your session and preferences. See our Cookie Policy for details.

3. How We Use Your Information

We use your personal information only for legitimate purposes, including:

• Providing, operating, and improving the Ez2Invoice platform
• Sending transactional emails such as invoice confirmations, payment receipts, and account notifications
• Processing subscription payments through Stripe
• Responding to support requests or inquiries
• Complying with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Third-Party Services

We use the following trusted third parties to deliver the service:

• Supabase - Database and authentication infrastructure, hosted on secure cloud servers.
• Stripe - Payment processing. Stripe is PCI-DSS Level 1 certified. Your card data never touches our servers.
• Resend - Transactional email delivery for account and invoice notifications.
• Vercel - Application hosting and infrastructure.

Each of these providers maintains their own privacy practices. We only share the minimum data necessary to deliver the service.

5. Data Retention

We retain your account and invoice data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes (such as financial records, which may be retained for up to 7 years).

6. Your Rights

Depending on where you are located, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal data (right to erasure / right to be forgotten).
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at edamrau@hotmail.com. We will respond within 30 days.

7. Data Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), row-level security on our database, and secure authentication. However, no system is perfectly secure. We encourage you to use a strong, unique password and to contact us immediately if you suspect any unauthorized access to your account.

8. Children's Privacy

Ez2Invoice is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of Ez2Invoice after any changes constitutes your acceptance of the updated policy. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact Us

For any privacy-related questions, requests, or concerns, please reach out to us directly: