Privacy, in plain English.

Last reviewed for this release: September 2026.

What we process

We process the account email you use to sign in, business/profile details you choose to save, and the invoice/customer information contained in your latest import. Invoice exports may contain personal data about sole traders or named business contacts.

Why we process it and lawful basis

Account and invoice data are processed to provide the service you request, including authentication, calculation, qualification and document generation. Depending on the relationship with you, the controller relies on performance of a contract or steps requested before entering a contract, and legitimate interests in operating, securing and improving the service. Where another lawful basis is required, the controller will identify it before using the data for that purpose.

Retention

The latest invoice import is automatically purged after 30 days by a scheduled server cleanup, and is also deleted when you use “Delete my data”. Saved business/profile data remains until you delete it or the account is otherwise removed. Authentication security records are kept only as long as needed for the sign-in flow and abuse prevention. When payments are switched on, a minimal billing record (Paddle customer and subscription references, the free-letter marker and which customers had letters in the current billing period) is kept while a subscription exists, survives “Delete my data” so that access, cancellation and refund requests keep working, and is deleted twelve months after the last billing activity once no subscription remains.

Who receives the data

Infrastructure and email-delivery providers may process limited data on the controller’s behalf to host the service and deliver sign-in codes. They should be engaged under appropriate data-processing terms. Invoice/customer data is not sold to advertisers. Subscriptions are sold by Paddle.com Market Ltd (or Paddle.com Inc. for some regions) as merchant of record: Paddle collects your billing name, email address, address and payment details directly under its own privacy policy, and we receive only a customer reference and the subscription status, never card details.

International transfers

If a service provider processes personal data outside the UK, the controller must use an applicable UK transfer mechanism or adequacy arrangement and appropriate safeguards. Contact hello@invoiceowed.com for the current provider/subprocessor and transfer information.

Your rights

Depending on UK data-protection law and the circumstances, you may have rights of access, rectification, erasure, restriction, objection and data portability, and rights relating to automated decision-making. The service does not make a court or legal decision about you; it produces calculations and documents from facts confirmed by the user.

Complaints

Contact hello@invoiceowed.com first if you have a privacy concern. You also have the right to complain to the UK Information Commissioner’s Office (ICO) if UK data-protection law applies.

Security

Authenticated app responses are marked private/no-store, sessions use HttpOnly/SameSite cookies, uploads are size-limited, stored files use restricted permissions where supported, and production refuses to start without session signing, persistent data storage, privacy-controller, email-delivery and sender configuration.

Automated calculations

Invoice Owed applies deterministic rules to the data and confirmations supplied by its user. Ambiguous or missing facts are designed to block a figure rather than be guessed. Users remain responsible for reviewing the underlying facts and deciding whether to send correspondence.