Privacy policy
InvoToday (“we”, “us”, or “our”) provides a cloud-based invoicing and business document platform at app.invotoday.com and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our marketing website or use our application.
By using InvoToday, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the service.
1. Information we collect
Account and profile information
When you register or sign in, we may collect:
- Name, email address, and username
- Password or authentication tokens when you sign in with email/password or OAuth providers (Google, Microsoft)
- Profile picture and account preferences
- Role and permissions within your workspace
Business and tenant data
To provide invoicing functionality, you and your team may enter business information that we store on your behalf, including:
- Company profile, branding, tax registrations, and regional settings
- Customers, vendors, products, services, payment terms, and other master data
- Sales documents (quotations, invoices, credit notes), purchasing documents (purchase orders, purchase delivery notes, purchase invoices), line items, tax calculations, and document history
- Print layout configurations and generated PDF documents
- User accounts and activity within your tenant workspace
You are responsible for ensuring that you have a lawful basis to collect and upload any personal information about your customers, vendors, or contacts into InvoToday.
Usage and technical information
We automatically collect certain technical data when you use the service, such as:
- IP address, browser type, device information, and operating system
- Log data, timestamps, pages viewed, and actions taken in the application
- Diagnostic, performance, and error information
- Authentication events and security-related activity
Communications
If you contact us by email or through support channels, we collect the content of your messages and related contact details so we can respond.
Marketing website
Our public marketing site may use cookies or similar technologies for basic functionality and analytics (including Google Analytics via Google Tag Manager). See Section 8 for more information.
2. How we use information
We use the information we collect to:
- Provide, operate, maintain, and improve InvoToday
- Create and manage your account and tenant workspace
- Generate documents, calculate taxes, produce PDFs, and deliver core product features
- Send service-related emails such as verification codes, password reset messages, and account notices
- Respond to support requests and communicate about the service
- Monitor usage, troubleshoot issues, prevent fraud, and protect security
- Comply with legal obligations and enforce our Terms of Service
- Analyse aggregated or de-identified usage to improve the product
We do not sell your personal information.
3. How we share information
We may share information in the following circumstances:
- Service providers: With trusted vendors who help us host infrastructure, send email, provide authentication, monitor performance, or support operations. These providers are permitted to use data only to perform services for us.
- Within your organization: With other users in your tenant workspace according to the roles and permissions you configure.
- Legal requirements: When required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of InvoToday, our users, or others.
- Business transfers: In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality obligations.
- With your direction: When you ask us to share information or integrate with a third-party service you choose.
4. Data retention
We retain account and business data for as long as your workspace is active or as needed to provide the service. If you close your account or a tenant is deactivated, we may retain certain information for a limited period to comply with legal obligations, resolve disputes, enforce agreements, and maintain backups and audit records.
You may request deletion of your account subject to applicable law and our data retention requirements.
5. Security
We implement administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration. These measures include access controls, encrypted connections, tenant isolation, and monitoring.
No method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your credentials and for configuring appropriate access within your organization.
6. Your rights and choices
Depending on your location, you may have rights to:
- Access, correct, or update personal information we hold about you
- Request deletion of personal information, subject to legal exceptions
- Object to or restrict certain processing
- Request portability of information you provided
- Withdraw consent where processing is based on consent
- Opt out of non-essential marketing communications
You can update much of your account information directly in the application. For other requests, contact us using the details below. We may need to verify your identity before responding.
7. International transfers
InvoToday may process and store information in countries other than the one where you reside. Where required, we use appropriate safeguards for cross-border data transfers.
8. Cookies and similar technologies
Our marketing website may use analytics cookies through Google Tag Manager and Google Analytics to understand how visitors use the site. The application may use cookies, local storage, or similar technologies to remember preferences, maintain sessions, and support core functionality. You can control cookies through your browser settings, although disabling them may affect functionality.
9. Third-party links and sign-in
The service may contain links to third-party websites or allow sign-in through third-party identity providers. Their privacy practices are governed by their own policies, not this one.
10. Children’s privacy
InvoToday is intended for business use and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us so we can delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice within the application or by email. Continued use of the service after changes become effective constitutes acceptance of the updated policy.
12. Contact us
If you have questions about this Privacy Policy or our data practices, contact us at:
InvoToday
Email: sales@invotoday.com
Website: www.invotoday.com