Privacy Policy

Invvy has no account system, no database, and no server-side application code. The site is a set of static files served from Cloudflare's global network. There is no API endpoint that accepts invoice data, so there is nothing to breach, subpoena, or leak — client names, rates, and payment details never leave your browser.

Like any website, our hosting provider (Cloudflare) processes standard technical request data — such as your IP address and browser user agent — transiently, to deliver the files and protect the site from abuse. That processing is governed by Cloudflare's privacy policy. We do not receive or retain access logs containing your invoice content, because that content is never sent.

As you type, your draft autosaves to your browser's localStorage — a storage area that belongs to your browser on your device. It exists so you can close the tab and pick up where you left off on the same device.

• Local storage is not a cookie and is never sent to a server with requests.
• Clearing your browser's site data permanently deletes the draft.
• We cannot read, restore, or recover your draft — a copy never reaches us, so there is nothing for us to hand back to you.

When you press Download, the PDF is assembled by JavaScript running in your browser tab and saved straight to your device. The file is not uploaded, rendered, or watermarked by any server — once the page has loaded, the whole process works even with your network connection switched off.

This site is designed to work with no analytics at all, and most builds ship without any. If we enable analytics on this deployment, it is Google Analytics 4, loaded last on the page so it never delays the editor. GA4 collects aggregate usage statistics — pages viewed, approximate country, device type — and does not log full IP addresses. Analytics never sees your invoice content: form fields are not transmitted anywhere, by design.

We do not currently show advertising. If we introduce ads to keep the tool free, they would be served by a network such as Google AdSense, whose cookies may be used to personalize or measure ads. Where the law requires it (including the EEA, UK, and Switzerland), we will ask for your consent through a certified consent management platform before any advertising cookie is set. You can always opt out of personalized advertising via Google Ad Settings or aboutads.info/choices.

• No accounts, no email capture, no newsletter you didn't ask for.
• No sale or sharing of personal data — there is nothing to sell.
• No tracking of the content of your invoices, clients, or prices.

You can erase everything this site knows about you — the local draft — at any time by clearing your browser's site data for this domain. You can block cookies or third-party scripts in your browser; the invoice editor and PDF download keep working either way.

If we change how data is handled — for example, enabling analytics or advertising — we will update this page and revise the date at the top before the change ships.

Questions about this policy? Reach us via the contact page.