Privacy Policy

Invoice Hero ("we", "us", "our") operates the Invoice Hero web and mobile application (the "Service"). We are the data controller for the personal data we process in connection with the Service.

If you have any questions about this policy or how we handle your data, you can contact us at privacy@invoicehero.app.

• Account data: name, email address, and password (hashed).
• Business profile: business name, address, phone, VAT number, UTR, company number, bank details, and logo.
• Client & invoice data: the client details and invoice information you enter to use the Service.
• Bank connection data: transaction data retrieved via TrueLayer when you connect a bank account.
• Usage data: device, browser, and how you interact with the Service.
• Cookies & similar technologies as described below.

• To provide, operate, and maintain the Service.
• To process subscription payments through Stripe.
• To send invoices to your clients on your behalf through our email provider.
• To retrieve and display bank transactions when you connect an account.
• To provide support and respond to your enquiries.
• To secure the Service and prevent fraud or abuse.
• To comply with our legal obligations.

Under the UK GDPR we process your personal data on the following legal bases:

• Contract: to provide the Service you signed up for.
• Consent: for cookies and any optional marketing communications.
• Legitimate interests: for security, analytics, and service improvement.
• Legal obligation: to meet accounting, tax, and regulatory requirements.

We use essential cookies to keep you logged in and remember your preferences, and we may use analytics cookies to understand how the Service is used. Non-essential cookies are only set after you give consent through our cookie banner.

You can withdraw consent at any time by clearing your browser storage, and you can configure your browser to refuse cookies (though some features may not work).

We do not sell your personal data. We share data with processors who help us operate the Service:

• Stripe — payment processing.
• Resend / our email provider — delivering invoices on your behalf.
• TrueLayer — bank account connections and transaction data.
• Cloud hosting providers — storing your data securely.

We may also disclose data where required by law or to protect our rights.

Some of our processors may process data outside the UK. Where this happens, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses.

We keep your data for as long as your account is active. When you close your account, we delete your data within a reasonable period unless we are required to keep it for legal, accounting, or tax purposes.

Under the UK GDPR you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Request erasure of your data ("right to be forgotten").
• Restrict or object to processing.
• Receive a portable copy of your data.
• Withdraw consent at any time.
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, email privacy@invoicehero.app.

We use encryption, access controls, and secure infrastructure to protect your data. However, no method of transmission over the internet is completely secure.

The Service is not intended for anyone under 16, and we do not knowingly collect their data.

We may update this policy from time to time. We will review the "Last updated" date above and notify you of material changes where appropriate.

If you have any questions about this Privacy Policy, contact us at privacy@invoicehero.app.