1. Data we collect
When you use Invoice Reader, we collect: (a) account information you provide (email address, hashed password); (b) forwarded invoice emails and their attachments (PDFs, images); (c) extracted invoice data (totals, tax, vendor names, due dates); and (d) usage metadata (timestamps, feature interactions). We do NOT access your personal email account or any mailbox you have not explicitly forwarded to us.
2. How we use your data
We use your data to: extract structured invoice information and display it in your dashboard; provide, maintain, and improve the service; communicate with you about your account (billing, feature updates, support); and comply with legal obligations. We do NOT sell your data to third parties.
3. Data sharing with third parties
We share forwarded invoice content with LLM providers (currently Anthropic, Google, and DeepSeek) solely for extraction purposes. These providers process data per their respective data-processing terms and do not use it for model training. Payments are processed by Lemon Squeezy, which receives billing information per its own privacy policy. We use Supabase for database hosting and authentication. We do not share your data with any other third parties except as required by law.
4. Data retention
We retain your account data and extracted invoices for as long as your account is active. When you request account deletion, we soft-delete your data (flag it as deleted). Data may remain in encrypted backups for up to 90 days after soft deletion. If you need physical deletion, contact us directly.
5. Data security
We use industry-standard encryption in transit (TLS) and at rest. Authentication is handled by Supabase Auth. However, no online service is 100% secure — you share data at your own risk.
6. Your rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or port your data, or to object to or restrict its processing. To exercise any of these rights, contact us at the email below. We will respond within the timeframe required by applicable law.
7. Cookies & tracking
Invoice Reader uses essential cookies for authentication and locale/theme preferences. We do not use third-party tracking cookies or ad networks. We do not currently respond to browser "Do Not Track" signals.
8. International transfers
Your data may be processed in the United States, where our infrastructure providers (Supabase, AgentMail) and LLM providers operate. By using Invoice Reader, you consent to this transfer and processing.
9. Children's privacy
Invoice Reader is not directed at children under 16, and we do not knowingly collect data from them. If you believe a child has provided us with personal data, contact us and we will delete it.
10. Changes to this policy
We may update this privacy policy from time to time. Material changes will be communicated via the email on your account. Continued use after changes take effect constitutes acceptance.
11. Contact
For privacy-related questions, contact us at privacy@invoicereader.app (placeholder — replace before production).