Privacy policy

The short version

Your data is yours. If you use the free invoice generator without an account, we don't collect your invoice content at all — you type it into your browser and the PDF is produced on your device. When you do share data with us (for example an account, a saved client, or a stored invoice), we only hold it so you can access it and use the service. We don't sell data, we don't use it for advertising, and we don't send marketing email.

Who controls your data

FairInvoice, an independent UK sole trader, is the data controller for this site. Contact: [email protected]. We'll give our full trading name and postal address on request.

What we collect — and why

We collect as little as possible. Anything you enter is held only for your benefit and your access: so you can log in, retrieve your saved work, manage your subscription, and pick up where you left off. We do not mine it, sell it, or use it for anything beyond running the service for you.

• Nothing, for anonymous invoice creation. Invoice and quote fields, and QR codes you generate for free, are handled in your browser. Some settings (for example your last-used details, market preference, and voice speech on/off) are kept in your browser's local storage on your own device.
• Account data if you sign up: email address, an encrypted password or Google sign-in identifier, and the dates your account was created and last signed in.
• Subscription data if you pay: the PayPal subscription or order ID, which plan you're on, its status and dates. We never see or store your card details.
• Saved business and client details if you're a Pro user and choose to save them — your business profile, saved clients, invoice numbering settings and saved documents.
• AI Voice Pro audio and transcripts if you use it: the recording is sent for transcription and the text is sent to an AI model to extract invoice fields. We store usage counts (requests and tokens) so we can monitor the feature.
• Referral data if you use refer-a-friend: your referral code, who signed up with it, and whether a £2 rebate is due.
• Basic analytics: page views with page path, referrer, rough device type and a timestamp, plus Google Analytics. We use this to see which pages are useful.
• Email sending logs if you email an invoice from your account: the recipient address, subject and delivery outcome.

Why, and on what legal basis

• To run your account and provide paid features — performance of our contract with you.
• To take and manage payments, prevent fraud and abuse, and keep the site secure — our legitimate interests, and legal obligation for tax records.
• To understand how the site is used and improve it — our legitimate interests, using aggregate figures.

Who we share it with

We use a small number of processors, and only for the purposes above:

• Lovable Cloud (Supabase) — database, authentication and file storage for accounts and paid features.
• PayPal — payments and subscriptions. PayPal is the payment processor and its own privacy policy applies to the checkout.
• Cloudflare — DNS, security and content delivery for the site and for sending invoice emails from our domain.
• AI model providers, via the Lovable AI gateway — speech transcription, invoice field extraction and spoken prompts for AI Voice Pro, and the on-site assistant. Audio and text are sent for processing only to produce your result.
• Google Analytics — aggregate site usage.

Some of these providers process data outside the UK. Where they do, transfers rely on the safeguards in their own terms, such as standard contractual clauses. We never sell your data or share it for advertising.

How long we keep it

Account, subscription and saved-document data is kept while your account exists, and deleted on request. Payment records are kept for six years where tax law requires. Analytics page views are kept in aggregate. Voice recordings are processed to produce your draft invoice and are not retained by us as audio files.

Cookies and similar storage

We use local storage and cookies that are needed to keep you signed in and remember your preferences, plus Google Analytics cookies for usage measurement. We don't run advertising or retargeting cookies.

Your rights

Under UK GDPR you can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, and receive it in a portable form. Email [email protected] and we'll respond within one month. If you're unhappy with our response you can complain to the Information Commissioner's Office. If you're in the US, the same request address applies.

Security and children

Data is transmitted over HTTPS, passwords are stored hashed by our authentication provider, and access to stored data is restricted per user at database level. No service is perfectly secure, so please don't email us bank details or customer payment information.

FairInvoice is a business tool and is not intended for under-18s.

Changes

We'll update this page if what we do changes, and change the date at the top. See also our terms of use and contact page.