$
InvoDraft

Privacy Policy

Last updated: June 27, 2026

1. Information We Collect

Account information: Name, email address, and password when you sign up. Document data: Content you enter when creating documents (stored securely in your account). Payment information: Processed by Lemon Squeezy — we do not store card numbers. Usage data: Pages visited, features used (via Google Analytics and Microsoft Clarity).

2. How We Use Your Information

We use your information to: provide and improve the Service, send transactional emails (receipts, verifications), send product updates (you can opt out), prevent fraud and abuse.

3. Data Storage and Security

Your data is stored in Supabase (PostgreSQL on AWS us-east-1). All data is encrypted in transit (TLS) and at rest (AES-256). We use row-level security to ensure you can only access your own data.

4. Third-Party Services

We use: Supabase (database/auth), Vercel (hosting), Lemon Squeezy (payments), Resend (email), Google Analytics (analytics), Microsoft Clarity (heatmaps), Sentry (error tracking). Each has their own privacy policy.

5. Cookies

We use cookies for authentication (Supabase session) and analytics (Google Analytics). You can disable cookies in your browser settings, though this may affect functionality.

6. Your Rights

You can request deletion of your account and all associated data at any time by emailing support@invodraft.com. We will delete your data within 30 days.

7. Contact

Privacy questions? Email support@invodraft.com.