Privacy Policy
Last updated 9 November 2026
This explains what Site Invoice ("we", "us") collects, why, and who else handles it. We keep it short and we only describe what the service really does.
What we collect
- Account: your email address and a password (stored only as a salted hash).
- Your business profile: business name, contact details, address, payment instructions and an optional logo.
- Invoices: your clients' names and contact details, the line items, amounts and notes. Photos you take and the text of your voice note are used to draft an invoice; we don't keep the photo or the audio after the draft is made, only what you save in the invoice.
- Payments: which packs you bought and a payment reference. Stripe holds your card details; we never receive them.
- Technical data: sign-in cookies and your IP address, used to keep you signed in, prevent abuse and enforce rate limits.
How we use it
To run your account, draft and send your invoices, take payment for packs, send account emails (confirmation and password reset), keep the service secure and fix problems. We don't sell your data and we don't use it for advertising.
Where your data lives
The live database runs on Fly.io servers in Toronto, Canada. A continuous backup of that database, which includes your account and all invoice data, is kept in a cloud storage bucket located in the United States. Backups are kept for about 14 days. By using the service you accept that your data is stored and processed outside Canada, and that it may be accessible to US authorities under US law.
Who else handles it
- Anthropic (the Claude AI): receives the photo and the voice-note text you submit, only to read them into draft invoice lines.
- Stripe: processes pack payments.
- Resend: delivers our emails, including invoices you choose to email, which carry your client's email address.
- Fly.io and Amazon Web Services: hosting and backup storage, as described above.
- Your browser's speech recognition: if you use the microphone, your browser or device maker (for example Google or Apple) converts your voice to text. That happens before it reaches us and is governed by their privacy terms.
These providers act on our behalf or under their own terms. We share only what each needs to do its job, and we may disclose data if the law requires it.
Your clients' information
You are the one who enters your clients' details. Please make sure you're allowed to, and that they know you invoice them using this service.
Keeping and deleting data
We keep your data while your account is open. To see, correct or delete your data or close your account, email oluobamzy@gmail.com. Deleted data leaves our backups within about 14 days. We may keep payment records as long as tax or accounting rules require.
Security
Passwords are hashed, connections use HTTPS, and sign-in cookies are protected. No service is perfectly secure, so please use a password you don't use elsewhere.
Children
Site Invoice is for businesses and is not meant for anyone under 16.
Changes
If we change this policy we'll update the date above and tell you in the app or by email if the change is significant.
Contact
Privacy questions or requests: oluobamzy@gmail.com.