QuickInvoice

Privacy Policy

Last updated: 11 July 2026

1. Who we are

QuickInvoice is operated by JVANET Pty Ltd, registered in Australia. This policy explains what we collect, why, and the choices you have. It is written to satisfy the Australian Privacy Act and, for users in the EU/UK, the GDPR.

2. What we collect

  • Account data — your email address and authentication details (password hash or Google sign-in identifier).
  • Business data you enter — your business profile, client names and contact details, and invoice contents.
  • Payment metadata — payment status, amounts, and Stripe transaction references. We never receive or store card numbers; payments are handled entirely by Stripe.
  • Technical basics — logs needed to run and secure the Service. We do not run third-party advertising or tracking cookies; the only cookies we set are those required to keep you signed in.

3. Why we use it (and legal bases)

  • To provide the Service — create, send, and track your invoices (contract).
  • To generate AI-assisted line items when you ask for them (contract; the description you type is sent to our AI provider and is not used to train their models).
  • To secure the Service and prevent abuse (legitimate interests).
  • To communicate service messages (contract / legitimate interests).

4. Who processes data for us

We use a small set of processors, each receiving only what their job requires:

  • Supabase — database, authentication, and hosting of application data.
  • Stripe — card payment processing.
  • Resend — delivering invoice emails you choose to send.
  • Anthropic — generating line-item suggestions when you use the AI feature.
  • Vercel — application hosting.

These providers may store data outside Australia or the EU; where GDPR applies, transfers rely on standard contractual clauses or equivalent safeguards.

5. Your clients’ data

Client details you enter are processed on your instructions so you can invoice them. You are responsible for having a lawful basis to give us those details; we use them only to provide the Service to you.

6. Retention and deletion

We keep your data while your account is active. Ask us to delete your account and we will remove your personal data within 30 days, except records we must keep for legal or accounting reasons.

7. Your rights

You can access, correct, export, or delete your data, and (where GDPR applies) object to or restrict processing and complain to your supervisory authority. Australians may complain to the OAIC. Contact us to exercise any right.

8. Changes

We will post any changes here and, if they are material, tell you in the app or by email.