Privacy Policy

Last updated: May 2025

JustInvoice ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. We comply with applicable privacy laws including PIPEDA (Canada) and, where applicable, the GDPR (EU/EEA).

1. Information We Collect

We collect the following types of information when you use the Service:

• Account information: your email address, name, and password (stored as a secure hash)
• Business information: your business name, address, tax number, and other profile details you provide
• Invoice data: client names, contact details, line items, amounts, and payment status
• Usage data: pages visited, actions taken, and error logs for debugging and improving the Service
• Payment information: billing details are handled entirely by Stripe — we do not store card numbers or full payment details

2. How We Use Your Information

We use your information to:

• Provide and operate the Service (creating accounts, generating invoices, processing payments)
• Send transactional emails (invoice delivery, payment confirmations, account notifications)
• Respond to support requests and improve the Service
• Comply with legal obligations

We do not sell your personal data. We do not use your data for advertising.

3. Data Storage

Your data is stored on servers provided by Railway, located in the US East region. Data is protected in transit using TLS (HTTPS) and at rest using industry-standard controls. We retain your data for as long as your account is active, or as required by law.

4. Third-Party Services

We use the following third-party services to operate JustInvoice:

• Stripe — payment processing. When you or your clients use Stripe-powered payment links, Stripe's own Privacy Policy applies to that data.
• Resend — transactional email delivery. Invoice emails and account notifications are sent through Resend. Their Privacy Policy governs their handling of email data.
• Railway — cloud infrastructure and hosting.

We do not share your data with any other third parties except as necessary to operate the Service or as required by law.

5. Cookies

We use session cookies only. A single secure, HTTP-only cookie (ji.sid) is set when you log in to maintain your session. This cookie contains no personal data and expires after 30 days of inactivity or when you log out.

We do not use analytics cookies, advertising cookies, or any third-party tracking scripts.

6. Your Rights

You have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you
• Correction: update or correct inaccurate information via your account settings
• Deletion: request deletion of your account and associated data
• Portability: export your data at any time from your account settings
• Withdrawal of consent: you may close your account at any time

To exercise any of these rights, contact us at hello@getjustinvoice.app. We will respond within 30 days.

7. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice in the Service. Continued use of the Service after notice of changes constitutes acceptance of the updated policy.

9. Contact Us

Questions, concerns, or requests about your privacy? Contact us at hello@getjustinvoice.app.