At a glance
- We use information to provide, secure and improve Invoisar.
- You control your workspace, members and connected services.
- We do not sell personal information or use Google data for advertising.
- You may have rights to access, correct, delete or move your information.
Who we are
Invoisar provides tools for documents, customers, Items & Services, expenses, payments, reports, workspaces, teams and integrations. Invoisar is responsible for the account, billing, product-usage and support information described in this policy.
When a business uses Invoisar to manage information about its customers, suppliers, staff or document recipients, that business normally decides why and how the information is used. In that situation the business is the controller and Invoisar processes the information on its behalf. Questions about information entered by a business should usually be directed to that business first.
Information we collect
Information you provide
- Account and profile details, such as name, email address and authentication information.
- Business and workspace details, including company information, branding, tax settings, team members and permissions.
- Customer, supplier, document, item, expense, attachment, signature and payment-record information you add to the service.
- Subscription and billing details. Complete card details are handled by our payment provider rather than stored by Invoisar.
- Messages, feedback and files you send when requesting support.
Information collected when you use Invoisar
We may receive device, browser, IP address, session, diagnostic, security and product-activity information, including actions taken in a workspace. Connected services may also provide account identifiers, permissions, tokens and the information needed to perform the connection you requested.
How we use information
| Purpose | Typical information | Reason |
|---|---|---|
| Provide Invoisar | Account, workspace and document data | Perform our contract |
| Subscriptions and billing | Plan, invoice and transaction metadata | Contract and legal obligations |
| Protect the service | Login, device, IP and activity data | Legitimate interests in security and fraud prevention |
| Support and troubleshooting | Contact details, messages and diagnostics | Contract and legitimate interests |
| Service communications | Email and account settings | Contract; consent where required |
| Meet legal duties | Relevant account and transaction records | Legal obligation |
Where we rely on legitimate interests, we consider the effect on your rights. Where consent is the basis, you may withdraw it at any time.
Connected services
You may choose to connect third-party services. These can include Stripe for payments and Google services for Gmail expenses, customer conversations and contact imports. We request only the permissions needed for the feature you select, and you can disconnect a service from the relevant settings.
Information received from Google APIs is used only to provide and improve the user-facing features you request. It is not sold, used for targeted advertising or transferred for unrelated advertising purposes.
Third-party providers process some information under their own privacy terms. Review those terms before connecting an account.
How we share information
We share information only when needed to operate Invoisar or when the law requires it. Recipients may include:
- People you invite to your workspace, according to their role and permissions.
- Customers and other recipients when you send or share a document.
- Infrastructure, authentication, communications, storage, analytics, support and payment providers acting for us.
- Professional advisers, potential successors in a business transaction, or public authorities where legally required.
We require service providers to protect information and use it only for the services they supply to us.
International transfers
Some providers may process information outside the United Kingdom or the country where you live. Where data-protection law requires it, we use a recognised adequacy decision, approved contractual safeguards or another lawful transfer mechanism, together with additional protections where appropriate.
How long we keep information
We keep account and workspace information while the account is active and for a reasonable period afterwards so we can provide recovery, resolve disputes and meet legal duties. Billing, security and audit records may be kept longer where required. Deleted information may remain in protected backups until the backup cycle completes.
Retention can also depend on the instructions of the business controlling the workspace. Connected-service tokens are removed or made unusable when the connection is revoked, subject to necessary security and backup processes.
Security
We use safeguards designed for the nature of the information, including access controls, authenticated sessions, encrypted transport, permission checks, monitoring and backups. No online service can guarantee absolute security.
You are responsible for using a strong, unique password, protecting your devices, choosing appropriate team permissions and telling us promptly if you believe an account has been compromised.
Your rights
Depending on the law that applies, you may ask to access, correct, erase, restrict or receive a copy of your personal information, or object to certain uses. You may withdraw consent where processing is based on consent. You may also object at any time to direct marketing.
Contact support@invoisar.com to make a request. We may need to verify your identity. If information belongs to a business workspace, we may refer the request to that business. In the UK, you may also complain to the Information Commissioner’s Office.
Cookies and local storage
Invoisar uses essential cookies and similar browser storage to keep you signed in, protect sessions, remember preferences and operate requested features. If we introduce optional analytics or advertising technologies, we will provide the choices required by law before using them.
Children and policy changes
Invoisar is intended for businesses and people aged 18 or over. We do not knowingly provide accounts to children.
We may update this policy as the service or law changes. We will post the new version here, change the “Last updated” date and give additional notice where a change materially affects your rights.
Contact us
For privacy questions, requests or complaints, email support@invoisar.com. For the rules governing your use of the service, read our Terms of service.