Privacy Policy

1. Introduction

Invoicrm Inc. ("Company", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, company name, phone number
• Business Data: Client information, leads, quotes, invoices, job details, and other data you enter into the Service
• Payment Information: Billing address and payment method details (processed securely by Stripe)
• Communications: Messages you send to us for support or feedback

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on the Service
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Server logs, error reports, and performance data

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send administrative notifications and updates
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns and trends
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Third-Party Service Providers

We use trusted third-party services to help operate our Service:

• Supabase: Database hosting and authentication
• Stripe: Payment processing
• Google: OAuth authentication (if you sign in with Google)
• Resend: Transactional email delivery
• Vercel: Application hosting

4.2 Authorized Dealers and Partners

If you are part of a dealer or partner network, certain information may be shared with authorized parties:

• Businesses may authorize dealers to view aggregated reports and performance data
• Dealers who opt-in may share their reports with the authorizing business
• You control what data is shared through your account settings

This sharing is optional and requires explicit authorization from all parties involved.

4.3 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

4.4 Business Transfers

In connection with any merger, acquisition, or sale of assets, your information may be transferred as a business asset.

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit (TLS/SSL)
• Encryption of data at rest
• Regular security assessments
• Access controls and authentication
• Secure data centers with physical security measures

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and authentication state
• Remember your preferences
• Analyze usage patterns to improve the Service

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of the Service.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request a copy of your data in a portable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests

To exercise these rights, contact us at hello@invoicrm.com.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise your CCPA rights, contact us at hello@invoicrm.com.

9. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide the Service you have requested (e.g., account creation, payment processing, customer support)
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving the Service, fraud prevention, and security
• Consent: Where you have given explicit consent for specific processing activities (e.g., marketing communications)
• Legal Obligations: Processing necessary to comply with applicable laws and regulations

10. Data Retention

We retain your data for as long as your account is active or as needed to provide you with the Service. After account deletion, we may retain certain data for up to 90 days in backups, and longer if required for legal or compliance purposes.

11. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws, including GDPR for EU residents and PIPEDA for Canadian residents.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: