Privacy Policy

Simple Invoicing · Last updated August 30, 2026

This Privacy Policy describes how Simple Invoicing (“Service”, “we”, “us”), operated at simpleinvoice.dev, collects, uses, stores, and shares information when you use our website, admin application, and customer invoice pages.

Who this policy applies to

• Account holders — businesses and users who sign in to create and manage invoices.
• Customers — people who receive, view, or pay invoices through a payment link.

Each account holder operates in a separate workspace. Data in one workspace is not visible to other workspaces unless you choose to share it.

Information we collect

Depending on how you use the Service, we may process:

• Account information — name, username, email address, and sign-in method (password or Google account).
• Business information — company name, address, phone, logo, invoice branding, and payment settings you configure.
• Contact and invoice data — customer names, emails, companies, invoice line items, amounts, due dates, notes, and payment status.
• Payment information — payment amounts, transaction references, and payment method metadata processed through Square. Card and bank details are handled by Square, not stored directly by us.
• Technical data — session cookies for admin sign-in, server logs, and basic request information needed to operate and secure the Service.

Google user data

If you choose to use Google features, we access Google user data only after you authorize our app through Google OAuth. We request the minimum scopes needed for the features below.

Sign in with Google (optional)

• Scopes: OpenID Connect, email address, and basic profile (name).
• What we receive: your Google account ID, email address, and display name.
• How we use it: to authenticate you and create or access your workspace account.
• What we do not receive: your Google account password.

Gmail sending (optional)

• Scope: gmail.send — send email on your behalf.
• How we use it: to send invoice emails that you initiate from the admin dashboard (including test emails you request).
• What we store: OAuth refresh and access tokens needed to send mail from the Gmail address you authorized, your connected Gmail address, and connection timestamps.
• What we do not do: read your inbox, modify existing messages, or send email without an action you take in the app.

Google Drive storage (optional, with Gmail OAuth)

• Scope: drive.file — access only to files this app creates or opens.
• How we use it: to store workspace logos you upload, invoice PDFs generated when you send invoices, and updated PDFs when invoice status changes.
• Where files are stored: in a Simple Invoicing folder structure in your Google Drive, scoped to your workspace.
• What we do not do: access your entire Drive, browse unrelated files, or upload data for advertising or resale.

Google Limited Use disclosure

Simple Invoicing’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In summary:

• We use Google user data only to provide or improve user-facing features that are prominent in the Service (sign-in, invoice email delivery, and file storage you enable).
• We do not sell Google user data.
• We do not use Google user data for advertising, retargeting, or interest-based advertising.
• We do not use Google user data to determine creditworthiness or for lending purposes.
• We do not allow humans to read Google user data except with your affirmative agreement for specific support cases, for security investigation, to comply with law, or when aggregated for internal operations in accordance with applicable law.
• We do not transfer Google user data to third parties except as needed to operate the Service (Google as the API provider), for security, to comply with law, or with your consent.

Revoking Google access

• Disconnect Gmail in the admin dashboard under Gmail (workspace admins only).
• Remove Simple Invoicing’s access anytime in your Google Account permissions.
• Sign out of the admin app to end your session.

How we use information

We use collected information to:

• Provide invoicing, payment collection, and email delivery features.
• Authenticate users and maintain separate workspaces.
• Display invoices to customers and process payments they authorize.
• Run scheduled jobs such as recurring invoices and due-date reminders where enabled.
• Maintain security, prevent abuse, and troubleshoot the Service.

We do not sell personal information.

Other third-party services

• Square — payment processing for invoices. See Square’s Privacy Policy.

How information is shared

• With customers — invoice details you send are visible on the customer invoice and payment page.
• With service providers — such as Google and Square, only as needed to provide features you enable.
• For legal reasons — if required by law, regulation, or valid legal process.

We do not share workspace data between unrelated account holders.

Data retention

We retain account, invoice, and payment records while your workspace is active and as needed to provide the Service, comply with law, resolve disputes, and enforce agreements. Google OAuth tokens are retained until you disconnect Gmail or revoke access. Files stored in your Google Drive remain in your Google account under your control. You may archive invoices in the admin dashboard; archived records remain stored unless deleted according to workspace practices.

Security

We use administrative and technical measures appropriate to the Service, including encrypted connections (HTTPS), access controls for admin areas, rate limiting, and secure storage of integration credentials. No method of transmission or storage is completely secure.

Your choices

• Account holders can update business settings, disconnect Gmail, and manage users in their workspace.
• Customers pay invoices only when they choose to submit payment on the invoice page.
• You may stop using the Service at any time. Integration tokens can be disconnected from the admin settings area.

Children’s privacy

The Service is intended for business use and is not directed to children under 13. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will reflect the latest version. Continued use of the Service after changes become effective constitutes acceptance of the revised policy.

Contact

Questions about this Privacy Policy or Google user data handled by the Service: privacy@simpleinvoice.dev