Privacy Policy
Last updated: 23 August 2026
This Policy explains what personal data 1001invoice collects, how we use it, and the rights you have. The data controller is the company named below.
1. Data Controller
The company named in the Contact section below decides how and why your personal data is processed and is responsible for it under applicable data-protection law.
2. Data We Collect
We collect: your account email; the business, client, and invoice details and other content you enter; usage and technical data such as IP address, device, and log information; and payment metadata (plan, status, transaction identifiers). We never store full card numbers.
3. How We Use Your Data
We use your data to provide the Service — to generate, calculate, store, and export your invoices; to process subscriptions and payments; to send transactional emails such as sign-in codes and receipts; to secure and improve the Service; and to comply with legal and accounting obligations.
4. AI Processing
To create your invoices, the instructions and invoice content you provide are sent to our AI provider for processing. We instruct the provider not to retain your data or use it to train models.
5. Subprocessors & Sharing
We share data only with the service providers that make the Service work: payment processing (Flitt), email delivery (Postmark), AI processing (OpenRouter), and hosting. Each processes data on our behalf under contract. We do not sell your personal data.
6. Payments & Card Data
Card payments are handled by our payment processor. Your card details are entered with the processor and never pass through or are stored on our servers.
7. Security
We protect your data with encryption in transit, access controls, and reputable infrastructure providers. No online service can be completely secure, but we work to keep your data safe and to notify you of a breach where required.
8. Cookies
We use only essential cookies needed for sign-in, security, and remembering your language and theme preferences. We do not use advertising cookies.
9. Retention & Your Rights
We keep your data while your account is active and for as long as needed for legal and accounting purposes, then delete or anonymise it. You may access, correct, export, or delete your data and object to certain processing — contact us to do so.
10. Changes & Contact
We may update this Policy and will notify you of material changes. For any privacy request or question, contact us using the details below.
11. The Company Network
Listing a company is optional and you choose when to do it. Anyone holding the link can then see that company's name, whether it is verified, and the billing details you entered for it — its address, tax and registration numbers and contact email — because a page you can send instead of typing those details out is the whole point of listing. Its bank details are never shown. Evidence you send us for verification is seen only by us and is never published. If invoices have previously been emailed to your own verified address, we will tell you they exist and add them to your inbox only if you ask — we never do this automatically, we match only that exact address, and they go only to your own account. When you link a client of yours to a listed company, that is a private note in your own records: the company is not told, and no one is ever shown who has them saved as a client. A company learns of a relationship only when an invoice is actually sent. Closing your account withdraws your listings and removes your inbox, but invoices you have already sent remain in their recipients' records, because those are the recipients' documents rather than yours.