Privacy policy

Effective July 5, 2026 · Invoice Seal is operated by STREX LLC ("we", "us")

This policy describes what we collect, why, and who touches it. The short version: we collect what the product needs to work, we don't run advertising or sell data, and everything sensitive about payments lives with Stripe, not us.

1. What we collect

• Account data — your email address (used for magic-link sign-in) and the business details you put on invoices (name, address, tax numbers, logo).
• Invoice and client data — the invoices you create and the client names, emails, and addresses you enter. Your clients' details are entered by you; you're responsible for having the right to use them.
• Deliverable files — watermarked preview images you upload are stored in a publicly readable storage bucket (that's what lets your client see them without an account). Your sealed original link is stored privately and released only on payment.
• Payment metadata — Stripe processes all card payments. We never see or store card numbers; we store Stripe identifiers (checkout session, payment intent, customer and subscription IDs) and payment status.
• Activity events — when an invoice page is viewed, when an invoice email is opened (a tracking pixel in the email), when payments and reminders happen. These are shown to the invoice owner as an activity feed.
• Local mode — the try-it-without-an-account composer stores everything in your own browser's local storage. Nothing reaches our servers until you sign up.

2. What we don't do

• No advertising, no ad trackers, no analytics cookies, no selling or renting data.
• No reading your deliverable files beyond the automated watermarking of previews you upload.
• No marketing email without your consent — transactional email only (invoices, receipts, payment notices, reminders).

3. Who processes data for us

• Supabase — database, authentication, and file storage (hosted in the Asia-Pacific region).
• Stripe — payment processing, Connect payouts, and subscription billing.
• Resend — transactional email delivery.
• Netlify — website and application hosting.
• Google Fonts — our pages currently load fonts from Google's servers, which means Google receives your IP address when a page loads. We plan to self-host fonts to remove this.

Each provider processes data only to provide their service to us, under their own security and privacy commitments.

4. Email open tracking

Invoice emails include a tiny invisible image that tells the invoice's owner the email was opened. This exists so freelancers know their invoice didn't land in spam. It logs the open event and nothing else — no location profiling, no cross-site tracking. Many email clients block these images automatically, in which case no open is recorded.

5. Retention and deletion

We keep your data while your account is active. Invoices are financial records, so after account deletion we may retain invoice records where laws require it, and delete everything else. To export or delete your data, email contact@invoiceseal.io — we'll act within 30 days.

6. Your rights

Depending on where you live (GDPR in the EU/UK, CCPA in California, and similar laws elsewhere) you may have rights to access, correct, export, restrict, or delete your personal data. Email us and we'll honour them. If you're a client of one of our users — someone who received an invoice — the freelancer who sent it is the controller of your details; we'll still help route your request.

7. Security

Data is encrypted in transit, database access is enforced with row-level security so accounts can only read their own records, sealed download links are never sent to a browser before payment, and payment flows are locked so that only a verified Stripe payment can release a sealed file. No system is perfectly secure; if we ever discover a breach affecting your data we'll notify you promptly.

8. Changes

If this policy changes materially we'll email account holders before the change takes effect. The effective date at the top always reflects the current version.

9. Contact

Privacy questions or requests: contact@invoiceseal.io.