Privacy Policy

1. What we collect

• Account info: name, email, and authentication data (including via Google sign-in, if you use it).
• Billing info: handled directly by Stripe — we never see or store your card number.
• Invoice files you upload, for the time it takes to extract their data.
• Usage data: which plan you're on and how many invoices you've processed, to enforce plan limits.

2. How invoice files are handled

Uploaded PDFs are sent to Google's Gemini API for extraction and are not stored on our servers afterward — we keep a file in memory only long enough to forward it and return the result. We do not use your invoice content to train any model.

3. Who we share data with

• Supabase — hosts our database and handles authentication.
• Stripe — processes payments and stores billing details.
• Google (Gemini API) — processes invoice content to extract data.

We do not sell your data.

4. Data retention

We keep account and usage records for as long as your account is active. You can request deletion of your account and associated data at any time by contacting us.

5. Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal data, and to object to certain processing. Contact us to exercise these rights.

6. Security

Data is encrypted in transit. Access to production data is limited to what's needed to operate the Service.

7. Contact

Questions about this policy: legal@invoiceflow.company · +1 (555) 010-0199.