Privacy Policy

1. Introduction

GetMeInvoice ("we", "our", "us") is operated by GetMeInvoice, based in Surrey, British Columbia, Canada. This Privacy Policy explains how we collect, use, disclose and protect information about you when you use our website at getmeinvoice.com and our invoice management application (collectively the "Service").

By using our Service you agree to the collection and use of information in accordance with this policy. If you do not agree with the practices described here, please do not use the Service.

2. Information We Collect

Information you provide directly

When you register for and use GetMeInvoice, we collect information you provide to us, including:

• Account information: your full name, email address, phone number, city and business type when you register
• Company information: your business name, logo, GST/tax registration number and payment details you enter during setup
• Client data: names, phone numbers and email addresses of your clients that you enter into the Service
• Invoice data: the services, rates, amounts and dates you create within the Service
• Communications: messages and attachments you send to our support team

Information collected automatically

When you use our Service, we automatically collect certain information about your device and how you interact with the Service:

• Usage data: pages visited, features used, time spent in the application, clicks and interactions
• Device information: browser type and version, operating system, device type and screen resolution
• Log data: IP address, access times and dates, referring URLs and error logs
• Cookies and similar technologies: see Section 8 (Cookies) for full details

Information from third parties

We may receive limited information from third-party services we use to operate the Service:

• Payment processors (Stripe): transaction confirmation and billing information when you subscribe to a paid plan
• Email delivery services (Resend): delivery status and open tracking for invoices you send by email

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide, operate and maintain the Service and your account
• Create and manage your account and personalise your experience
• Generate and deliver invoices on your behalf to your clients
• Process payments for paid subscription plans
• Send service notifications, payment receipts and support responses
• Monitor usage patterns to fix bugs, prevent abuse and improve features
• Comply with applicable legal obligations and enforce our agreements
• Prevent fraud, unauthorised access and ensure the security of the Service

We do not sell your personal information to third parties. We do not use your client data for any purpose other than providing the Service to you.

4. How We Share Your Information

We share your information only in the following limited circumstances:

Service providers

We work with a small number of trusted third-party companies to operate the Service. Each provider is bound by confidentiality obligations and may only use your data to provide services on our behalf:

• Resend — email delivery infrastructure to send invoices to your clients
• Stripe — secure payment processing for subscription plans
• Supabase — database infrastructure for storing your data securely
• Vercel — cloud hosting and delivery of the web application
• Google Analytics — aggregated, anonymised usage analytics

Legal requirements

We may disclose information about you if we believe in good faith that disclosure is required by law, court order or government authority, or to protect the rights, property or safety of GetMeInvoice, our users or the public.

Business transfers

If GetMeInvoice is acquired, merged with another company or undergoes a corporate reorganisation, your information may be transferred to the acquiring entity. We will notify you by email and/or prominent notice in the Service before your information becomes subject to a materially different privacy policy.

5. Data Storage and Security

Your data is stored on secure servers provided by Supabase, with infrastructure located in the United States and/or Canada. We implement industry-standard security measures to protect your information, including:

• Encryption in transit using TLS/SSL for all data transferred between your browser and our servers
• Encryption at rest for stored database content
• Role-based access controls limiting which personnel can access data
• Two-factor authentication requirements for internal systems
• Regular security assessments and monitoring

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Your invoice data and client information belongs to you. We act as a data processor on your behalf and process your clients' data only according to your instructions through the Service.

6. Data Retention

We retain your account information and associated data for as long as your account remains active. If you request deletion of your account, we will delete your personal data within 30 days of your request, except where retention is required or permitted by applicable law.

Invoice records may be retained for up to 7 years following the date of the invoice for legal, tax and accounting compliance purposes, even after account deletion. This retained data is stored securely and used only as required by law.

Anonymised and aggregated data that cannot be used to identify you may be retained indefinitely for analytical purposes.

7. Your Rights (PIPEDA — Canadian Privacy Law)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable British Columbia and federal privacy legislation, you have the following rights with respect to your personal information:

• Access: request access to the personal information we hold about you
• Correction: request correction of inaccurate or incomplete information
• Withdrawal of consent: withdraw consent to the collection and use of your information at any time, subject to legal or contractual restrictions
• Deletion: request deletion of your personal information, subject to our legal retention obligations
• Complaint: lodge a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca

For users in the European Economic Area (GDPR)

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation:

• Data portability: receive a copy of your personal data in a structured, machine-readable format
• Restriction of processing: request that we restrict how we use your data in certain circumstances
• Right to object: object to processing of your data based on our legitimate interests
• Automated decision-making: not be subject to decisions based solely on automated processing that significantly affect you

To exercise any of these rights, contact us at: privacy@getmeinvoice.com. We will respond to your request within 30 days.

8. Cookies

We use cookies and similar browser technologies to operate the Service and understand how you use it. Cookies are small text files stored on your device when you visit our website.

We use the following types of cookies:

• Session cookies: essential cookies that keep you logged in during your visit. These are deleted when you close your browser.
• Persistent cookies: remember your preferences and settings between visits. These remain on your device for a set period.
• Analytics cookies: Google Analytics cookies that help us understand how visitors interact with our website. Data is aggregated and anonymised. You can opt out at tools.google.com/dlpage/gaoptout.

You can control and manage cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service, including the ability to remain logged in.

9. Children's Privacy

GetMeInvoice is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at privacy@getmeinvoice.com and we will take steps to delete that information promptly.

10. Third-Party Links

Our Service may contain links to third-party websites, integrations or resources. These third parties have their own independent privacy policies. We are not responsible for the privacy practices, content or security of those external sites. We encourage you to review the privacy policies of any third-party websites or services before providing personal information to them.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or for other legitimate business reasons. We will notify you of material changes by sending an email to the address associated with your account and/or by posting a prominent notice in the Service at least 30 days before the changes take effect.

The "Last updated" date at the top of this page indicates when this policy was most recently revised. Your continued use of the Service after the effective date of changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions, concerns or requests regarding this Privacy Policy or our data practices, please contact us:

For urgent privacy matters or data breach notifications, please email privacy@getmeinvoice.com with the subject line "URGENT — Privacy".

To file a complaint under PIPEDA, contact the Office of the Privacy Commissioner of Canada: