Privacy Policy

1. Data We Collect

• Account data: name, email, company details provided during registration.
• Usage data: invoices, customers, payments, and events created within InvoiceFlow.
• Technical data: IP addresses, browser type, access timestamps, and error logs for security and debugging.

2. Payment Data

We do not store payment card numbers, CVVs, or sensitive payment credentials. All payment processing is handled exclusively by Stripe, which is PCI DSS compliant. We only store Stripe-issued references (customer IDs, payment intent IDs) necessary to operate billing features.

3. How We Use Your Data

• Delivering and improving InvoiceFlow services.
• Processing billing and subscription management.
• Sending transactional emails (invoices, payment notifications, reminders).
• Internal analytics to monitor platform health and usage.
• Fulfilling legal and compliance obligations.

4. Data Sharing

We do not sell your data. We share data only with:

• Stripe — for payment processing.
• Infrastructure providers — for hosting, storage, and delivery (subject to data processing agreements).
• Legal authorities — if required by applicable law.

5. Data Security

All data is transmitted over TLS 1.3 encryption. Access to production systems is role-restricted. We conduct regular security reviews. No system is 100% secure, but we take reasonable measures to protect your data.

6. Data Retention

We retain your data for as long as your account is active. Upon account termination, data is retained for 30 days before deletion unless a longer retention period is required by law.

7. Your Rights

You have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us at support@s3digital.online. We will respond within 30 days.

8. Cookies

We use cookies strictly for authentication sessions and basic analytics. We do not use third-party advertising cookies. You can disable cookies in your browser but this may affect platform functionality.

9. Third-Party Dependencies

InvoiceFlow integrates with Stripe and other infrastructure providers. These services have their own privacy policies and data handling practices, which we encourage you to review.

10. GDPR (EU Users)

If you are located in the European Economic Area, you have additional rights under GDPR including the right to restriction of processing, the right to data portability, and the right to lodge a complaint with a supervisory authority. Our legal basis for processing is legitimate interest and contractual necessity. Contact us to submit a GDPR data request.

11. Contact

Privacy questions? Contact us at support@s3digital.online.