Privacy Policy

Last updated: 22 July 2026

This Privacy Policy explains what personal information Invoicing for Idiots ("we," "us," "our") collects, how it's used, and who it's shared with.

1. Information we collect

CategoryExamples
Account informationYour email address and password (handled securely by our authentication provider — we never see your raw password)
Business profileBusiness name, address, ABN, logo, bank details, payment link — whatever you choose to enter
Client informationNames, emails, phone numbers, and addresses of your own clients, entered by you
Invoice/quote dataLine items, amounts, GST, notes, and any photos you attach
Expense recordsDescriptions, amounts, dates, and receipt photos you choose to log
Payment informationHandled directly by Stripe — we receive confirmation of payment status but never see or store your full card number
Usage dataBasic technical data such as your browser type, stored locally to make the app work offline

2. How we use your information

We do not sell your personal information, and we do not use it for third-party advertising.

3. Who we share information with

We use a small number of trusted third-party service providers to operate the Service. Each only receives the information necessary to perform its function:

ProviderPurpose
SupabaseDatabase hosting, authentication, and file storage
NetlifyWebsite hosting
ResendSending transactional emails (invoices, quotes, reminders) on your behalf
StripePayment processing and subscription billing

We don't share your information with any other third party except where required by law.

4. Your clients' information

When you add a client's details or send them an invoice or quote, that information is stored so you can manage your own business relationships. Your clients' names and invoice details may also appear on a shareable public link if you choose to send one, or in a PDF you download or email. You're responsible for having an appropriate basis to hold and share your clients' information as part of running your business.

5. Data storage and security

Your data is stored on secure, encrypted infrastructure provided by Supabase. Access to your account data is restricted so that only you can view or modify your own invoices, clients, and business information — enforced at the database level, not just in the app's interface.

As with any online service, no method of storage or transmission is 100% secure, and we can't guarantee absolute security.

6. Data retention

We retain your data for as long as your account is active. If you'd like your account and associated data deleted, contact us and we'll action this within a reasonable timeframe, subject to any records we're legally required to retain (for example, financial records related to your subscription payments).

Photos attached to invoices and quotes are automatically deleted 2 years after the invoice date. This is a fixed, automatic process — we don't keep photos indefinitely just because we can.

7. Your rights

You can access, export (via the built-in CSV export), and update most of your own data directly within the app at any time. You can also request:

8. Cookies and local storage

We use browser local storage to keep you logged in and to allow the app to work offline. We don't use third-party advertising cookies or tracking pixels for marketing purposes.

9. Children's privacy

The Service is intended for business use by adults and isn't directed at children. We don't knowingly collect personal information from anyone under 18.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

11. Contact

Questions about this Privacy Policy, or requests relating to your personal information, can be sent to the business contact email listed in your account or on our website.

As a small business, we may fall outside the strict scope of the Australian Privacy Principles under the Privacy Act 1988 (which generally apply to businesses with annual turnover above A$3 million), but we've written this policy to reflect those principles regardless. This document is a general template and hasn't been reviewed by a lawyer.