Privacy Policy

Last updated: July 1, 2025

1. Introduction

At Invoji, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our invoice management platform. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, such as:

• Name and email address
• Business name and address
• Phone number
• Payment information (when applicable)
• Tax identification numbers
• Other business-related information you choose to provide

2.2 Invoice and Client Data

When you use our Service, you may upload data including:

• Client names and contact information
• Invoice details and amounts
• Product or service descriptions
• Payment terms and history
• Business logos and branding materials

2.3 Automatically Collected Information

When you access our Service, we automatically collect certain information about your device, including:

• IP address
• Browser type and version
• Operating system
• Access times and dates
• Pages viewed and actions taken
• Referring website addresses

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Service
• Process your transactions and send related information
• Send administrative information, such as updates and security alerts
• Respond to your comments, questions, and provide customer service
• Monitor and analyze usage patterns and trends
• Improve our Service and develop new features
• Detect, prevent, and address technical issues
• Comply with legal obligations

4. How We Share Your Information

We may share your information in the following situations:

• Service Providers: We may share your information with third-party vendors who perform services on our behalf, such as hosting, data analysis, payment processing, and email delivery.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
• With Your Consent: We may disclose your personal information for any other purpose with your consent.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Regular backups of your data
• Security training for our team members

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need to use your information, we will remove it from our systems and records or anonymize it so that it can no longer identify you.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct any inaccurate or incomplete information
• Deletion: Request that we delete your personal information
• Data Portability: Request a copy of your data in a structured, commonly used format
• Objection: Object to our processing of your personal information
• Restriction: Request that we restrict the processing of your personal information

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

9. Third-Party Services

Our Service may contain links to third-party websites or services that are not owned or controlled by Invoji. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services.

9.1 Analytics and Monitoring Services

We use third-party services to help us analyze how users interact with our Service. These services collect information sent by your browser as part of a web page request, such as cookies or your IP address. The third-party analytics services we use include:

• Google Analytics: We use Google Analytics to track and report website traffic. Google Analytics uses cookies to collect anonymous information. You can opt-out of Google Analytics by installing the Google Analytics opt-out browser add-on.
• Mixpanel: We use Mixpanel for product analytics to understand how users interact with our application features. Mixpanel collects information about your actions within our Service.
• Hotjar: We use Hotjar to better understand our users' needs and optimize our Service. Hotjar uses cookies and other technologies to collect data on our users' behavior and their devices (in particular device's IP address, device screen size, device type, browser information, geographic location, and preferred language).

These services have their own privacy policies addressing how they use such information:

• Google Analytics: https://policies.google.com/privacy
• Mixpanel: https://mixpanel.com/legal/privacy-policy/
• Hotjar: https://www.hotjar.com/legal/policies/privacy/

10. Children's Privacy

Our Service is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

11. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

12. Marketing Communications

We may send you promotional communications about our products and services. You can opt out of receiving these communications at any time by clicking the "unsubscribe" link in the email or by contacting us directly.

13. Do Not Track Signals

We do not currently respond to "Do Not Track" browser signals or similar mechanisms. However, you can manage your cookie preferences through your browser settings.

14. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt-out of the sale of your personal information (though we do not sell personal information).

15. European Privacy Rights

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, or erase your personal data, the right to data portability, and the right to lodge a complaint with a supervisory authority.

16. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

17. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

• Email: privacy@invoji.com
• Support: Through the chat widget on our website

18. Data Processing Agreement

For business customers who require a Data Processing Agreement (DPA) for compliance purposes, please contact us to request our standard DPA.