Legal
Privacy policy
How this Invoicerr instance handles personal information. Last updated 15 October 2026.
- We use your details to run quotes, invoices, jobs and the client link you send.
- We do not sell personal information, and we do not run advertising pixels.
- Card numbers are entered on Stripe. Invoicerr does not store them. Bank transfer stays available on the invoice.
- A client with the link can open that quote or invoice. Treat the link like a secret.
1. Who is responsible
Invoicerr is software for quotes, invoices and related workspace tools. This website is a self-hosted instance. The operator of this instance, the person or business that runs the server and the domain you used, is the APP entity for personal information handled here.
Privacy requests: email [email protected]. Signed-in users can also open Help and use Chat with support.
This page describes the product as shipped. It is not legal advice. The operator should review it against how they actually host, back up and staff the instance.
2. What we collect
Account: full name, email address, password (stored as a salted scrypt hash), optional company name, and, if you use Continue with Google, the identity Google returns for that sign-in.
Workspace: customers and contacts (names, emails, phone numbers, addresses, ABNs), quotes and invoices (including notes, terms, line items and tax), recorded payments (amount, date and method you enter, not card numbers), jobs, projects, expenses and receipts, products, messages, templates, calendar-related records, and files you or your clients upload (logos, documents, receipts, portal attachments).
Client portal visitors: actions on a quote or invoice link you were sent (view, accept, decline, comments, typed or drawn signature). The link contains a secret token; anyone with the link can open that document.
Support: messages you send in product Help chat, and the email addresses listed as platform support agents.
Technical: session cookies needed to stay signed in, a theme preference, and a sidebar-state cookie in the signed-in app. We do not embed third-party advertising or analytics pixels.
3. Why we collect it
To create and secure your account, run your workspace, produce quotes and invoices, let clients open portal links, record payments you enter, store files you upload, and (if you use it) talk to platform support.
We do not sell personal information. We do not use it for third-party advertising.
4. Who else can see it
People in your organisation, according to their role.
Clients who open a portal link you share, they see that quote or invoice and can submit a response or signature.
Google, only if you choose Continue with Google.
A content delivery or reverse-proxy provider (for example Cloudflare) if the operator puts one in front of the site, they may see IP addresses and request metadata.
Platform support agents, only for Help chat you start, and only for emails the operator has authorised.
Card numbers are entered on Stripe, not stored in Invoicerr. When a customer pays an invoice by card, Stripe Connect processes that payment and sends the money to the connected account.
5. Overseas disclosure
Accounts, workspace records and uploaded files are stored on the operator's own server in Australia. Google sign-in, if used, involves Google, which may handle that data outside Australia. A global CDN or reverse proxy may also process connection metadata outside Australia.
6. Storage and security
Passwords are stored only as salted scrypt hashes. Workspace records live in PostgreSQL on the same server. Uploaded files are stored on the host disk outside the web root and served only through authenticated or token-checked routes.
Access uses signed-in sessions, organisation membership checks, and unguessable tokens for public portal and calendar links. You should treat a portal URL like a secret.
The operator is responsible for TLS, backups, and who can access the server. No internet service is perfectly secure.
7. How long we keep it
We keep account and workspace data while the account and organisation exist. A workspace owner can flush business data from Settings. Closing the account removes the login from this server.
To close a login entirely, contact the operator. Server, database and file backups may retain copies until those backups expire.
New customers, team invites, quotes, invoices, and payment reminders are emailed from [email protected] when you send them and the contact has an email address.
8. Access, correction and complaints
You can view and edit much of your workspace data while signed in. Ask the operator if you need a copy, a correction the product cannot make, or deletion.
If you are not satisfied, you may complain to the Office of the Australian Information Commissioner (OAIC). See oaic.gov.au.
10. Children
Invoicerr is for business users. Do not create an account if you are under 18.
11. Changes
This policy was last updated on 15 October 2026. Material changes will be posted on this page.