Privacy Policy

InvoiceHub is invoicing software for Indian businesses. This page explains what we store, why we store it, who else can see it, and how to get rid of it. It is written in plain language rather than legalese.

What we store

Two kinds of data, and it matters which is which.

Your account. Your email address, and the name and details of your business — address, GSTIN, PAN, bank details and any logo or signature you upload. You give us these so they can appear on your invoices.

Your customers' details. When you add a client you give us their name, contact details, address and GSTIN. This is data about someone else, entrusted to you. We process it only to produce the invoices you ask us to produce. We do not market to your clients, sell their details, or contact them.

What we never do

• Sell or rent your data, or your clients' data, to anyone.
• Use your invoice contents for advertising.
• Contact your clients on your behalf without you asking us to.
• Read your data except when you ask us to help with a specific problem.

Where it lives

Your data is stored in a managed PostgreSQL database and served from Singapore, which is the closest region to India that our hosting offers. These companies process data on our behalf:

• Vercel — runs the application and serves the pages.
• Neon — hosts the database your invoices are stored in.
• Google Firebase — handles sign-in. Firebase sees your email address; it does not see your invoices.
• GitHub — holds the nightly encrypted-at-rest backup snapshots, in a private repository.

Backups

Every night a snapshot of your data is copied to off-site storage so that a database failure cannot lose your invoices. Backups are retained for a rolling period and are only ever read to restore data. This means a copy of deleted data may persist in backups for a short time after you delete it from the app.

Deleting things

When you delete an invoice, client or quote it goes to Trash and can be restored. This is deliberate: an invoice deleted by accident is a real accounting problem, and a GST-compliant invoice number must stay accounted for even after the invoice is withdrawn.

If you want your account and everything in it removed permanently, email us and we will do it, including from backups at the next rotation. We will not make you jump through hoops.

Sign-in and cookies

We use a single cookie to keep you signed in. There are no advertising cookies, no analytics that follow you around the web, and no third-party trackers on the pages where your data is shown.

Security, stated honestly

Traffic is encrypted in transit. Every request is checked so that one business can never read another's data, and that boundary is covered by automated tests. Passwords are handled by Firebase and never reach our servers.

InvoiceHub is an early-access product built by a small team. We have taken care with the things that matter most — data isolation, backups, and never hard-deleting your records — but we are not going to claim a certification we do not hold. If security posture is critical to you, ask us and we will tell you exactly where we are.

Contact

For anything on this page — a question, a correction, or a deletion request — email contact@shubhamjangid.in.