Privacy Policy

Effective July 18, 2026

This policy is written to align with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and describes InvoiceFlow Canada's actual data practices in plain language. It is not a substitute for legal advice — if you have specific compliance requirements, please consult a lawyer.

What we collect

If you create an account, we collect:

Your name and email address (required to create an account).
Your business profile, customer records, and invoice data that you enter — this is information you provide directly to use the product.
Logo or signature images you choose to upload.
Login activity (timestamp, success/failure, IP address, browser) for security and fraud prevention.

If you use InvoiceFlow Canada as a guest (no account), your invoice data is stored only in your own browser and is not sent to our servers unless you choose to download it or create an account to save it.

How we use it

Solely to provide the service: creating and storing your invoices, authenticating you, generating your PDF/Excel/Word exports, and protecting your account and ours from abuse. We do not sell your personal information.

Who we share it with

We use a small number of service providers ("processors") to run InvoiceFlow Canada, each only with the data needed to perform their specific function:

Database and application hosting — stores your account and invoice data.
File storage — stores uploaded logos and signatures.
Email delivery — sends verification, password reset, and invoice emails on your behalf.
Google — only if you choose to sign in with Google, for authentication.
Cloudflare Turnstile — verifies you're not a bot on sign-up and other public forms.
Error monitoring — helps us detect and fix bugs; not used for tracking or advertising.

We do not share your personal information with advertisers, and we do not sell it to data brokers.

Where your data is stored

Your account and invoice data is stored in Canada.

Cookies and analytics

We use a session cookie to keep you signed in, which is essential to the service and not used for tracking. Our site analytics tool is privacy-respecting by design — it does not use cookies and does not track you individually across sites.

Your rights

Under PIPEDA, you have the right to:

Access the personal information we hold about you.
Correct inaccurate information (most of this you can edit directly in your account).
Withdraw consent and request deletion of your account and associated data.
Ask questions about how your information is handled.

To exercise any of these rights, contact usand we'll respond promptly.

Data retention

We retain your account and invoice data for as long as your account is active. If you delete your account, your personal information is deleted, except where we're required to retain records for legal or accounting purposes.

Changes to this policy

If we make material changes to this policy, we'll update the effective date above and, where appropriate, notify account holders by email.