Privacy Policy

Overview

Invoixy is an invoicing app for freelancers and small businesses. It is a direct-payment app: your customers pay you directly, outside Invoixy — by bank transfer or through the payment links and accounts you add — and you record those payments in the app yourself. Invoixy does not process, hold or move money. This policy explains what data Invoixy collects, why, who it's shared with, how long it's kept, and the choices you have. It applies to the Invoixy iPhone app and this website, including the Invoixy web app.

Invoixy is operated by Great X Inc, a company registered in Taiwan ("Invoixy", "we", "us").

Data we collect

To operate your account, Invoixy stores:

• Account information — your email address and your Invoixy user ID, created when you sign in with Apple or Google. If Apple or Google shares your name (and, for Google, your profile photo) at sign-in, the app uses your name to pre-fill your business profile, and our authentication provider keeps the basic profile details included in the sign-in token — such as your name and, for Google, your profile photo URL — with your sign-in record. Our authentication provider also records the IP address and browser or device information used for each sign-in, for account security.
• Device identifier — when you sign in, the app registers a per-install identifier for your iPhone, together with the platform and app version, so we can manage your signed-in devices. We do not collect a push-notification token.
• Business profile — your business name, email, phone number, address, website and tax ID, if you choose to add them, plus invoice settings such as default tax, payment instructions, brand color and template.
• Payment methods — the ways your customers can pay you that you choose to add, so they can be shown on your invoices: bank transfer details (bank name, account name, account number and routing code), payment links, handles for services such as PayPal.me, Venmo, Wise, LINE Pay and JKO Pay, Zelle contact details, and any payment instructions you write.
• Client records — names, company, email, phone numbers, addresses, tax IDs and notes for the clients you add, so you can invoice them.
• Saved items — the products and services you save for reuse on invoices: name, description, price, unit and tax rate.
• Invoices, quotes and payment records — the invoices and quotes you create, including line items, prices, discount, tax and totals, issue and due dates, notes, payment terms and the payment methods shown on each invoice, and the payments you record against them yourself (method, amount, reference or note). We never collect card numbers.
• Purchase history and unlock status — when you unlock Invoixy, the product, the order or transaction ID from Apple or Paddle, amount, currency and purchase date, and whether your account is unlocked, so we can unlock the app on your account.
• Usage events — when you create your account or a business, our database records that event with a timestamp and your account or business ID. These are the only usage events our servers record; they are not shared with any analytics or advertising company.

Deleting a client or invoice in the app removes it from your lists right away, but we keep the underlying record — a soft delete — until your account itself is deleted, so invoice numbering and your other records stay consistent.

Your business logo is stored only on your iPhone and is never uploaded to our servers.

Data we don't collect

The app contains no analytics, crash-reporting or advertising SDK. Apart from the two usage events above, we do not collect usage or diagnostic data. We do not collect your location, your device's contacts or photo library, health or sensitive data, browsing or search history, or advertising data.

How we use your data

We use your data only to provide Invoixy: to sign you in, store and sync your business, clients and invoices, generate your invoice PDFs, unlock your purchase, keep the service secure, and answer your support requests.

• No sale, no ads. We do not sell your data, share it for advertising, or link it to advertising profiles, and we do not track you across other companies' apps or websites.
• No AI training. We do not use your data, or your clients' data, to train artificial intelligence or machine-learning models.

Our role: controller and processor

For your own account, device, purchase and business-profile data, Great X Inc is the controller: we decide how that data is used, as described in this policy.

For the client records and invoices you enter about your own customers, you are the controller and Invoixy acts as your processor: we store and process that data only to provide the service to you, and you are responsible for having the right to collect and use it. If one of your customers asks us about their data, we'll refer them to you.

Service providers

We share data only with the service providers that help us run Invoixy, and only as needed for them to do so:

• Supabase — authentication and database hosting for all the app data described above.
• Apple — Sign in with Apple, and App Store purchases and restores.
• Google — Sign in with Google.
• Paddle — our online reseller and Merchant of Record when you buy on this website. Paddle collects your payment and billing details directly, under its own privacy policy.
• Vercel — hosting for this website, which processes standard request data such as your IP address and browser type when you visit, and counts page views on our public pages (page, referrer, country, device type) without cookies or cross-site tracking.

When you share an invoice, Invoixy creates a PDF and you choose where it goes (download, share or email). Anyone you send it to can see your business details, payment methods and your client's details on it. We don't host invoices at a public link.

We may also disclose data if required by law, or to protect the rights, safety or security of Invoixy, our users or others.

Signing in and security

You sign in to Invoixy with Sign in with Apple or Sign in with Google; there is no separate Invoixy password. We never receive your Apple or Google password. Access to your data is restricted so that only your account can read your own business, client and invoice records.

Payments and purchases

Invoixy does not process, hold or move money, and never sees card numbers. Your customers pay you directly, outside Invoixy — by bank transfer or through the payment links and accounts you add to your invoices — and you record each payment in Invoixy yourself.

In the App Store, Apple sells the Invoixy unlock; when you buy on this website, Paddle processes the order. Invoixy never sees or stores your payment card details — the seller you buy from handles billing and shares only the purchase details listed above so we can unlock your account.

A payment link on an invoice points to your own account with a third-party payment service. Payments made through it are handled by that service under its own terms and privacy policy; Invoixy is not involved.

Where your data is stored

Invoixy is operated from Taiwan, and app data is stored in a Postgres database hosted by Supabase in its us-east-1 region, in the United States. By using Invoixy, your data will be transferred to, stored and processed in the United States and other countries where our service providers operate, which may have data protection rules different from those where you live. We rely on our providers' contractual safeguards for these transfers.

Exporting your data

You can export your data at any time in the app: go to More → Account and, under Export, tap Export Invoices or Export Clients. Exports are CSV files you can open in any spreadsheet. If you can't use the app, email support@invoixy.com from the email address you sign in with.

Retention and deleting your account

We keep your data for as long as your account is active. You can delete your account in the iPhone app from More → Account → Delete Account. Your account is then scheduled for deletion and you are signed out on every device. You have 30 days to cancel: sign back in and tap Cancel Deletion. After the 30 days, your account, business profiles, payment methods, clients, saved items, quotes, invoices, payment records, unlock status, device records and usage events become eligible for permanent deletion and are removed the next time our deletion process runs.

Records of purchases are kept after deletion, because we may need them for tax and accounting. We remove the record's direct link to your Invoixy account, but the underlying record may still contain the account identifier we gave the seller at the time of purchase, which was your Invoixy user ID. Our authentication provider's security log of sign-ups and sign-ins, which includes your email address and the IP address used, is also kept after deletion. Deleted data may remain in our hosting provider's routine backups for a limited time until those backups expire. Your business logo lives only on your iPhone and is removed when you delete the app.

See Delete your Invoixy account for step-by-step instructions, including how to request deletion without the app.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to or restrict how we use it. You can do most of this directly in the app; for anything else, email support@invoixy.com. You may also have the right to complain to your local data protection authority.

Children

Invoixy is a business tool and is not intended for anyone under 16. We do not knowingly collect data from children under 16. If you believe a child has given us personal data, email support@invoixy.com and we'll delete it.

Changes to this policy

If this policy changes, we'll update the date at the top of this page.

Contact

Questions about this policy or your data? Email support@invoixy.com.

Great X Inc, Taiwan. See also our Terms of Service.