Legal
Privacy Policy
Last updated: September 30, 2026
EZ Invoices is committed to protecting your privacy. This policy explains what personal information we collect, how we use it, and your rights regarding that information. It is written to comply with applicable laws including GDPR, PIPEDA, and US state privacy laws.
1. Who We Are
EZ Invoices is operated as an early-stage product. For all privacy-related inquiries, please contact us at contact@ezinvoices.com. We are the data controller for any personal information you provide through the platform.
2. Information We Collect
We collect the following categories of personal information:
- Account information: Name, business name, email address, phone number if you add one, and password when you register.
- Invoice and client data: Client names, email addresses, phone numbers, addresses, and financial details you enter when creating invoices or estimates.
- Payment information: Billing details processed securely through Stripe. We do not store card numbers on our servers.
- Usage data: Log files, IP addresses, browser type, pages visited, and timestamps for security and improvement purposes.
- Cookies: Small files stored in your browser to maintain your session and preferences. See our Cookie Policy for details.
3. How We Use Your Information
We use your personal information only for legitimate purposes, including:
- Providing, operating, and improving the EZ Invoices platform
- Sending transactional emails such as invoice confirmations, payment receipts, and account notifications
- Sending text messages you ask us to send, as described in the Text messages section below
- Processing subscription payments through Stripe
- Responding to support requests or inquiries
- Measuring site visits and advertising results
- Complying with legal obligations
We do not sell or rent your personal information, including phone numbers. Optional analytics and advertising tags run only after you opt in. See the Cookie Policy.
4. Text messages
Phone numbers are personal information. We use them to send text messages only in the ways below. We do not use them for our own marketing texts, and we do not sell, rent, or share them with data brokers.
- Whose number: A phone number you add to your own account, and a customer phone number you type onto an invoice or estimate.
- When a text is sent: Only when you choose to text that invoice. We do not send automatic text reminders. Unpaid follow-ups, when turned on, go by email, not text.
- What the text contains: The customer's name, your business name, the document number, the amount, and a link to view or pay the invoice on ezinvoices.org.
- Who sends it: If you use the in-app Text button, we send the message through Twilio, our texting provider, from an EZ Invoices number, on your behalf. If you use the link that opens your own phone's messages app, the text leaves your phone. We still stored the number so you could start that message.
- How often: One text each time you send. Frequency depends on how often you choose to text. Message and data rates may apply to the person who receives it.
- Permission: You may text a customer only if that person agreed to receive invoice and payment texts from your business. You are responsible for having that permission before you send.
- Opt out: A recipient can reply STOP to the in-app text. Twilio then blocks further texts to that number until they reply START. We do not override that block. They can also ask you, the contractor, to stop, and you must not text them again.
- Help and deletion: For help with a text, or to ask us to delete a phone number, email contact@ezinvoices.com.
5. Third-Party Services
We use the following trusted third parties to deliver the service:
- Supabase - Database and authentication infrastructure, hosted on secure cloud servers.
- Stripe - Payment processing. Stripe is PCI-DSS Level 1 certified. Your card data never touches our servers.
- Resend - Transactional email delivery for account and invoice notifications.
- Twilio - Delivers invoice and payment texts you choose to send. Twilio receives the recipient's phone number and the message content. It does not receive card numbers.
- Vercel - Application hosting and infrastructure.
- Google - Advertising measurement (Ads ID AW-18351858546), only if you opt in to advertising cookies.
- Vercel Analytics - Cookie-free page-visit counts. It sets no cookies and does not identify you.
- Microsoft Clarity - Session recordings and heatmaps, only if you opt in to analytics cookies. Signed-in dashboard pages and the customer pay page are masked from Clarity recordings.
Each of these providers maintains their own privacy practices. We only share the minimum data necessary to deliver the service.
6. Data Retention
We retain your account and invoice data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes (such as financial records, which may be retained for up to 7 years).
7. Your Rights
Depending on where you are located, you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request that we correct inaccurate or incomplete information.
- Deletion: Request that we delete your personal data (right to erasure / right to be forgotten).
- Portability: Request your data in a structured, machine-readable format.
- Objection: Object to processing of your data for certain purposes.
- Withdraw consent: Where processing is based on consent, withdraw it at any time.
To exercise any of these rights, contact us at contact@ezinvoices.com. We will respond within 30 days.
8. Data Security
We use industry-standard security measures including encrypted connections (HTTPS/TLS), row-level security on our database, and secure authentication. However, no system is perfectly secure. We encourage you to use a strong, unique password and to contact us immediately if you suspect any unauthorized access to your account.
9. Children's Privacy
EZ Invoices is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of EZ Invoices after any changes constitutes your acceptance of the updated policy. The "Last updated" date at the top of this page reflects the most recent revision.
11. Contact Us
For any privacy-related questions, requests, or concerns, please reach out to us directly:
EZ Invoices
Email: contact@ezinvoices.com
