Privacy Policy

1) Scope

This Policy explains how we collect, use, disclose, and protect information when you use Instant Invoice—our service that generates invoices from user-submitted documents and information—via our website (instantinvoice.ai), any apps, and APIs.

2) Information We Collect

3) How We Use Information (Purposes)

We use information to:

• Provide & operate the Service (including sending inputs to third-party LLMs to generate outputs).
• Maintain, secure & improve the Service (including caching in Vercel Redis, load-balancing, logging, analytics, abuse prevention, and debugging).
• Communicate with you (Service emails, updates, security alerts).
• Research & development (aggregated or de-identified analytics and product improvement).
• Legal & compliance (enforce Terms, prevent fraud/abuse, comply with requests and obligations).
• Marketing (light-touch) where permitted by law (you can opt out).

4) Our Role; Third-Party LLMs & Subprocessors

We act as a controller of your account/usage data and as a processor (or service provider/contractor) of User Content we process on your behalf. To deliver outputs, your inputs/content may be sent to third-party LLM providers and infrastructure providers under contract.

Training on your content: We do not use User Content to train our proprietary models unless you explicitly opt in. We instruct subprocessors not to train on your content where such controls are available.

5) Sharing & Disclosures

We share information with:

• Service Providers/Subprocessors: hosting (e.g., Vercel), Vercel Redis, cloud/object storage, error monitoring, analytics, email and authentication providers, and third-party LLM providers.
• Professional Advisors & Authorities: where required by law, to protect rights/safety, or to prevent abuse.
• Business Transfers: in mergers, acquisitions, financings, or asset sales.

We do not sell personal information for money and we do not permit behavioral ads based on User Content.

6) International Transfers

Information may be transferred to countries other than yours. Where required, we rely on appropriate safeguards (e.g., Standard Contractual Clauses).

7) Retention

We keep personal data only as long as necessary for the purposes above. Generated outputs and intermediate artifacts may be temporarily stored (e.g., in Redis or object storage) for caching, delivery, reliability, and abuse prevention. We do not guarantee retention and may delete or anonymize data at our discretion. Operational logs are typically retained for a limited period consistent with security and compliance needs.

8) Cookies & Tracking

We use:

• Strictly Necessary Cookies (authentication, security, load balancing),
• Functional/Preference Cookies (e.g., language, UI settings), and
• Analytics Cookies (usage metrics to improve the Service).

Where required (e.g., in the EEA/UK), we request consent for non-essential cookies. You can manage cookies in your browser or via our cookie banner settings; blocking cookies may impact functionality. We currently do not respond to "Do Not Track" signals.

9) Your Choices & Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object or restrict certain processing, including withdrawal of consent for cookies or marketing. To exercise rights, contact privacy@instantinvoice.ai. We may verify your request and deny where permitted (e.g., when disclosure would adversely affect others or security).

10) Security

We use reasonable technical and organizational measures appropriate to the nature of the data and our business (e.g., encryption in transit, access controls, logging). However, no system is completely secure; transmission and storage are at your own risk.

11) Children

The Service is not directed to individuals under 16. If we learn we have collected personal data from a child, we will delete it.

12) Changes to This Policy

We may update this Policy from time to time. The "Effective Date" above shows the latest version. Material changes will be notified via the Service or email. Your continued use after changes means you accept the updated Policy.

13) Contact