InvoiceAI (“InvoiceAI”, “we”, “us”, or “our”) is committed to protecting your privacy and the confidentiality of the data you and your clients entrust to us. This Privacy Policy explains what information we collect, how we use and protect it, who we share it with, and the rights available to you. It applies to invoiceai.in and the InvoiceAI application (the “Service”).
1. Information We Collect
We collect the following categories of information:
- Account information: your name, email address, and a securely hashed password when you register.
- Payment information: processed by our payment partner, Razorpay. We do not store your full card or bank details on our servers.
- Uploaded content: the invoice PDF files you upload and the structured data extracted from them (“Invoice Data”). This may include third-party information such as supplier and customer names, addresses, GSTINs, bank account details, and transaction amounts.
- Usage and technical data: log data, device and browser information, used to operate, secure, and improve the Service.
- Feedback and support messages: if you use our feedback form, we store the email address and message you provide, and the page you were on, so that we can reply and follow up. You do not need an account to contact us. Please avoid sharing invoice PDFs or client data in that form.
2. How We Use Your Information
We use your information only to:
- Provide the Service — extract data from the PDFs you upload and generate Excel, CSV, and Tally-compatible exports.
- Process your payments and manage your credit balance.
- Send you service and account-related communications.
- Maintain the security and integrity of the Service, prevent fraud, and comply with applicable law.
We do not sell your data. We do not use your Invoice Data to train artificial-intelligence models. We do not use your Invoice Data for advertising.
3. Automated Processing — No Manual Handling
Data extraction is performed by automated artificial-intelligence systems. In the ordinary course, your invoices are not manually keyed in or read by our staff. There is no human data-entry step between your upload and your result.
4. Service Providers and Sub-processors
To deliver the Service, we share data only with the trusted service providers listed below. Each processes data solely to provide its service to us and is bound to protect it:
- Artificial-intelligence extraction provider (Google) — receives your uploaded invoices to extract their contents. We use a paid, business-tier interface under which your content is not used to train its models.
- Cloud hosting and database provider — hosts the application and securely stores your account data.
- Payment processor (Razorpay) — processes your payments.
- Website analytics (Cloudflare) — counts page views on our public website. It is cookieless: it sets no cookies, does not track you across other websites, and does not build a profile of you. It is not used inside your signed-in account.
We do not share your Invoice Data with any third party for that third party’s own marketing or independent purposes.
5. Data Location and International Transfer
Some of our service providers may store or process data on servers located outside India. Where data is transferred or processed outside India, we take reasonable steps to ensure it continues to receive an appropriate level of protection. We will update this Policy if and when our data is hosted within India.
6. Data Security
We implement industry-standard safeguards, including encryption of data in transit (TLS) and at rest, per-user access scoping enforced at the database level (row-level security), and restriction of access to authorised personnel only. While we take security seriously, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
7. Data Retention and Deletion
- Source PDF files are automatically deleted after extraction is completed, and in any event within 24 hours of upload.
- Extracted Invoice Data is retained while your account remains active so that you can re-export it, and is deleted within 30 days following closure of your account.
- You may request deletion of your account and associated data at any time by contacting us.
8. Cookies and Analytics
We use only essential cookies required for authentication and session management. We do not use third-party advertising or cross-site tracking cookies.
To understand how our public website is used, we use a privacy-friendly analytics service that measures page views without cookies. It does not track you across other websites and does not build a profile of you, which is why this site shows no cookie-consent banner — there is nothing to consent to.
9. Your Rights
Subject to applicable law, including India’s Digital Personal Data Protection Act, 2023, you have the right to access, correct, and request deletion of your personal data, to withdraw consent, and to seek grievance redressal. To exercise these rights, email us at info@invoiceai.in.
10. Grievance Redressal
In accordance with applicable Indian law, you can reach us for any concern or complaint regarding your data at info@invoiceai.in. We aim to acknowledge and address grievances within 30 days.
11. Children
The Service is intended for businesses and professionals and is not directed to individuals under the age of 18.
12. Changes to This Policy
We may update this Policy from time to time. Material changes will be posted on this page with a revised “Last updated” date.
13. Contact Us
For any questions about this Privacy Policy, email us at info@invoiceai.in.