Privacy Policy

1. Introduction

MakeInvo ("MakeInvo", "we", "us") provides an online invoice generator and invoicing platform. This policy describes our privacy practices for the makeinvo.com website and the MakeInvo application, including the free invoice generator, registered accounts, and paid subscription features.

2. Who controls your information

The entity responsible for your information as "data controller" (or equivalent role under your local law) is: [LEGAL BUSINESS NAME REQUIRED — OWNER CONFIRMATION NEEDED], trading as MakeInvo, [REGISTERED / BUSINESS ADDRESS REQUIRED — OWNER CONFIRMATION NEEDED]. This entity and address are placeholders pending confirmation from the business owner and must be completed with verified details before this page is treated as final.

3. Information users provide

Depending on how you use MakeInvo, you may provide: your name and email address (account registration); your business details (business name, address, tax ID, logo); your clients' names, email addresses, billing addresses, and tax numbers (when you create an invoice or save a client); invoice content such as line items, prices, notes, and payment terms; and messages you send us for support.

4. Account information

Creating a MakeInvo account stores your email address, authentication credentials (managed by our authentication provider, Supabase Auth - MakeInvo does not see or store your raw password), and any business/profile details you add in account settings.

5. Client and invoice information

When you use MakeInvo to create an invoice, you may enter personal information about your own clients (for example, a client's name, email, address, and tax number). You are responsible for having a lawful basis to enter and process your clients' personal information through MakeInvo - see Section 21.

6. Payment and subscription information

MakeInvo's own subscription billing (what you pay MakeInvo for a paid plan) is handled by Stripe and/or PayPal. MakeInvo does not receive or store your full card number, CVV, or PayPal login credentials - payment is entered directly with Stripe or PayPal, and MakeInvo only stores references such as your Stripe customer ID, subscription/plan status, and PayPal subscription ID, used to manage your subscription.

This is separate from any invoice payment records you choose to enter yourself on an invoice (for example, your own bank details shown to your client, or a payment you mark as received) - MakeInvo does not process or collect payment from your clients on your behalf.

7. Contact and support messages

If you contact us through the Contact page, we store the details you submit (name, email, category, message, and any optional account/invoice reference) so we can respond to and keep a record of the request.

8. Automatically collected technical information

Like most web applications, our hosting and security infrastructure automatically logs standard technical information, including your IP address and request metadata. We use IP addresses specifically to apply usage limits to the free invoice generator (so a guest cannot bypass the daily/monthly limit) and for general security and abuse prevention.

9. Cookies and analytics

MakeInvo uses strictly necessary cookies to keep you signed in (set by our authentication provider) and a small preference cookie for interface state. We use Vercel Analytics for aggregate, privacy-conscious website usage statistics. See the Cookie Policy for the full list and how to manage your choices.

10. How information is used

• To provide the invoice generator, dashboard, and account features you use
• To generate, store, and let you retrieve invoices and client records you create
• To process and manage your MakeInvo subscription, via Stripe/PayPal
• To respond to support, privacy, and security requests
• To maintain security, prevent abuse, and enforce usage limits
• To send account-related and, where applicable, service communications

11. Legal bases for processing

Where a legal basis is required by your local law (for example, under EU/UK data protection law), we rely on: performance of a contract (providing the service you sign up for), legitimate interests (security, abuse prevention, service improvement), consent (where you give it, such as optional cookies), and compliance with legal obligations.

12. How guest invoices are processed

The free invoice generator can be used without an account. When used this way, the invoice content you type is processed in your browser to generate a PDF and is not saved to any MakeInvo database - we do not persist guest invoice content server-side. We do record a lightweight, IP-based usage counter (not the invoice content itself) so guest usage limits can be enforced.

13. How registered-user invoices are stored

Once you create a free account and generate an invoice while signed in, the invoice and any saved client details are stored in our database, tied to your account, so you can view, edit, resend, or track them later from your dashboard.

14. Shared invoice links

Registered users can share a specific invoice with a client via a unique link. Anyone with that exact link can view that one invoice - it is not indexed by search engines and is not discoverable without the link. Sharing an invoice link only exposes that single invoice, never your client list, other invoices, or dashboard. There is currently no self-service option to revoke or expire an individual shared link after it has been sent; if you need a shared invoice link disabled, contact us via the Contact page.

15. Payment processing

Subscription payments to MakeInvo are processed by Stripe and/or PayPal under their own privacy policies and security standards. Card and PayPal account details are entered directly with these providers - they do not pass through, and are not stored on, MakeInvo's own servers.

16. Service providers and subprocessors

We use a small number of third-party providers to operate MakeInvo, listed with the category of information each can access on the Subprocessors page.

17. International data transfers

Our database is hosted in the United Kingdom. Our hosting/CDN provider, Vercel, can serve requests from multiple regions globally, which may mean data is processed in a country other than your own. Where a cross-border transfer requires additional safeguards under your local law, we rely on the safeguards our providers offer as part of their own compliance programs.

18. Data retention

We retain account, client, and invoice data for as long as your account remains active, so the service continues to work as expected. Exact retention periods after account deletion have not yet been confirmed by the business owner - see Section 19 for what we can currently confirm about deletion.

19. Account and data deletion

See the dedicated Data and Account Deletion page for exactly what you can delete yourself today (individual invoices), and how to request deletion of an account or other data that does not yet have a self-service option.

20. Data security

All connections to MakeInvo are encrypted using HTTPS/TLS. See the Security page for details on how your account and data are protected, and how to report a security concern.

21. User privacy rights

Depending on where you live, you may have rights to access, correct, export, or request deletion of your personal information, and to object to or restrict certain processing. You can exercise these rights by contacting us via the Contact page. If you enter your own clients' personal information into MakeInvo, you are responsible for having a lawful basis to do so and for responding to any privacy requests your clients make to you directly.

22. Children's privacy

MakeInvo is intended for business use and is not directed to, or knowingly used by, children.

23. Automated decision-making

MakeInvo does not use your personal information to make automated decisions that produce legal or similarly significant effects about you.

24. Business transfers

If MakeInvo is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

25. Legal disclosures

We may disclose information if required to do so by law, or if we believe in good faith that disclosure is necessary to comply with a legal obligation, protect our rights or property, or protect the safety of our users or the public.

26. Changes to this Privacy Policy

We may update this policy from time to time. The "Last updated" date at the top reflects when it was last materially changed. Continued use of MakeInvo after an update means you accept the revised policy.

27. How to contact MakeInvo

For privacy questions or requests, contact us at support@makeinvo.com or via the Contact page.

28. How to complain to a data authority

If you believe we have not handled your personal information properly, you have the right to lodge a complaint with your local data protection authority. We ask that you contact us first so we can try to resolve the issue directly.