Privacy policy

Account data — your name, email address and password hash, plus the business profile you enter (business name, address, GSTIN, PAN, bank details, logo and signature images).

Customer records — the customer names, companies, addresses, emails, phone numbers and GSTINs that you enter. This is your data about your customers; we act as a processor for it.

Document data — the content of your quotations and invoices, including line items and amounts.

Acceptance records — when a customer accepts or declines a quotation through a public link, we record the name they typed, the timestamp, their IP address and their browser user agent, because that is what makes the acceptance evidentially useful to you.

Usage and diagnostics — feature usage counts, AI request metadata (feature, model, token counts, latency, outcome), and error reports.

We never see or store your card or bank credentials. Payments are handled entirely by Razorpay on their own infrastructure; we receive a payment identifier and an amount.

AI features run server-side. Your browser never talks to an AI provider directly. When you use an AI feature we send the text needed for that specific request — your brief, the relevant document fields, your catalog item names — to the AI provider configured on our servers (currently Anthropic's Claude models and/or Google's Gemini models, depending on the feature and which is active at the time), and receive a draft back.

We log metadata about each request (which feature, which model, token counts, latency, success or failure) so we can meter usage and control cost. We do not use your content to train models, and no provider we use is instructed to retain your content for training.

Our processors are: Supabase (database, authentication and file storage), Vercel (application hosting), Anthropic and/or Google (AI processing — see above), Razorpay (payments), Resend (email delivery), Upstash (rate limiting) and Sentry (error monitoring). Each receives only what it needs to perform its function.

We do not sell personal data, and we do not share it for advertising.

Every record in Invora is tagged with a business identifier, and the database enforces row-level security so a query made on behalf of one business cannot return another business's rows — regardless of any bug in the application layer above it.

We keep your documents for as long as your account is open, because invoices are financial records you may need years later. After you close your account we retain data for 30 days to allow export and recovery, then delete it, except where we are required to keep records for tax or legal reasons.

Financial records are archived rather than hard-deleted while your account is active.

You can access and correct your data in the product at any time. You can request an export or a deletion by writing to privacy@invora.app; we respond within 30 days. If we process data as your processor (your customers' data), we will act on your instructions.

Data is encrypted in transit and at rest. Access to production systems is restricted and audited. Administrative actions taken by our staff are recorded with a mandatory reason and a before-and-after snapshot.

If a breach affects your data, we will notify you without undue delay and tell you what we know and what we are doing about it.

We set a session cookie so you stay signed in, and nothing else. There are no advertising or cross-site tracking cookies in Invora.