Privacy Policy

1. Who we are

InvoiceStack is an invoice-consolidation service. In this policy, “InvoiceStack,” “we,” “us,” and “our” refer to the service and its operator. If you have questions about this policy, contact us at support@invoice-stack.com.

2. Information we collect

We collect information you provide when you create or use an account, including your email address, authentication credentials or passkey information, support messages, and account preferences.

When you use the service, you may upload invoice files and choose the fields to extract. Those files and the resulting invoice data may contain personal or financial information about you or other people. You are responsible for having the authority to upload and process those files.

We also receive transaction and subscription information, such as product, payment status, and payment-history details. Payment details are handled by our payment provider; we do not intend to store full payment-card numbers on our systems.

We receive technical information needed to operate the service, including IP address and browser or device information in server logs, authentication cookies, and your theme preference. We also use DataFast in cookieless mode for aggregate website traffic, campaign performance, and product activation analytics.

3. Analytics

DataFast's cookieless tracker does not use cookies for visitor identification. It may process pseudonymous technical information, such as a rotating visitor identifier, browser and device details, approximate location, referring URL, and page or goal activity. We do not send invoice contents, filenames, extracted data, email addresses, job IDs, or account identifiers to DataFast. DataFast processes this information on our behalf as an analytics provider. Its processing terms are available in the DataFast Data Processing Agreement.

You may disable analytics through the control below or by contacting us. We will honor analytics opt-out requests.

4. How we use information

We use information to:

• create and secure your account;
• process uploaded invoices and generate exports;
• track credits, subscriptions, and payment history;
• respond to support requests and send essential service messages;
• protect the service, prevent abuse, and troubleshoot failures; and
• comply with legal obligations and enforce our agreements.

5. Invoice processing and service providers

InvoiceStack uses service providers to operate authentication, application data, payments, and invoice extraction. Current providers include Supabase for authentication and related data services, Polar for payments and subscriptions, and Google Gemini for certain AI-assisted extraction workflows. These providers process information only as needed to provide their services to us and under their own terms and privacy policies.

We do not use your uploaded invoice content to train our own models. Do not upload information that you are not authorized to share or that requires controls we do not provide.

6. Retention and deletion

Uploaded invoice files are stored temporarily while we process them. After a report is generated, the source uploads are removed and the generated XLSX report, together with the limited preview and job metadata needed to make it available, is retained for up to 24 hours. These report files and related job metadata are then automatically deleted. This retention period allows you to complete a payment, return to the dashboard, and download your report later, at any time during that 24-hour window, without having to process your invoices again. Backups, technical logs, and information we must retain by law may follow different retention periods. Account, transaction, and security records may be retained as reasonably necessary to provide the service, resolve disputes, comply with legal obligations, and maintain security.

7. Your choices and rights

You may ask us to access, correct, or delete personal information that we control, subject to legal and operational limits. You can also unsubscribe from non-essential communications. Contact us at the address below and include enough information for us to understand and verify your request.

8. Security

We use reasonable technical and organizational measures designed to protect information. No internet service can guarantee absolute security, so please use care when deciding what to upload.

9. Children

InvoiceStack is not directed to children who are below the minimum age required to use online services in their jurisdiction. We do not knowingly collect personal information from children through the service.

10. Changes to this policy

We may update this policy when the service or our data practices change. We will update the date shown above and, where appropriate, provide additional notice.

11. Contact

Questions about privacy can be sent to support@invoice-stack.com.