Privacy Policy
Your privacy is fundamental to how we build InvOwl
Last updated: June 23, 2025
InvOwl ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our invoice management service. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.
Information We Collect
Account Information
- • Email address and authentication credentials (managed by Clerk)
- • Full name and display name
- • Company name and business information
- • Profile photo (optional)
- • Role (entrepreneur, freelancer, small business, enterprise)
- • Industry and business type
- • Communication preferences (email, WhatsApp, SMS)
Email and Document Data
- • Email messages containing invoices or receipts
- • Email attachments (PDFs, images, and other document formats)
- • Sender information and email metadata
- • Connected email account information (via OAuth)
Invoice Information Extracted
- • Invoice numbers, dates, and due dates
- • Vendor/merchant names and contact information
- • Invoice amounts, tax details, and currency
- • Line items, descriptions, and quantities
- • Payment status and terms
- • Document classification (invoice, receipt, bill, statement)
- • Expense categories (software, services, supplies, etc.)
Payment and Subscription Data
- • Stripe customer ID (no credit card details stored)
- • Subscription plan and status
- • Payment history and billing invoices
- • Usage metrics against plan limits
Usage Information
- • Number of documents processed
- • Emails scanned and analyzed
- • Feature usage patterns
- • Total savings calculated
- • API usage statistics
How We Use Your Information
We use the collected information for the following purposes:
Service Delivery
- • Automatically fetch and process invoices from your connected email accounts
- • Extract and organize invoice data using AI technology
- • Calculate savings and provide financial insights
- • Enable bulk export and document management features
Communication
- • Send invoice processing notifications
- • Provide customer support and respond to inquiries
- • Share product updates and new features (with consent)
- • Send billing and account-related communications
Service Improvement
- • Analyze usage patterns to improve features
- • Enhance AI accuracy for invoice extraction
- • Develop new features based on user needs
- • Ensure platform stability and performance
Third-Party Services We Use
We integrate with trusted third-party services to provide our functionality:
Clerk
User authentication and session management
Nylas
Email integration and attachment retrieval
Stripe
Payment processing and subscription management
Firebase (Google)
Database storage and file storage
OpenAI
AI-powered invoice data extraction
Each third-party service has its own privacy policy and data handling practices. We only share the minimum necessary information required for the service to function.
Information Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share your information only in these circumstances:
- ✓With your consent: When you explicitly authorize us to share information
- ✓Service providers: With companies that help us operate our service (under strict confidentiality agreements)
- ✓Legal requirements: When required by law or to respond to legal process
- ✓Business transfers: In connection with a merger, acquisition, or sale of assets
- ✓Aggregated data: Anonymized data that cannot identify you personally
Data Security
We implement comprehensive security measures to protect your data:
Technical Measures
- • Encryption in transit (TLS/SSL)
- • Encryption at rest for sensitive data
- • Secure authentication (OAuth 2.0)
- • Regular security updates
Operational Measures
- • Access controls and authentication
- • Regular security assessments
- • Employee training on data protection
- • Incident response procedures
Your Rights and Choices
You have control over your personal information:
Access and Portability
Request a copy of your personal data in a structured format
Correction
Update or correct inaccurate information through your account settings
Deletion
Request deletion of your account and associated data
Communication Preferences
Opt-out of marketing communications at any time
Data Processing
Object to certain types of data processing
Data Retention
We retain your information for as long as necessary to provide our services:
- • Active accounts: Data is retained while your account is active
- • Invoices and documents: Retained according to your subscription plan and preferences
- • After deletion: Some data may be retained for legal compliance (typically 30-90 days)
- • Anonymized data: May be retained indefinitely for analytics
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your country. We ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy.
Children's Privacy
Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.
Updates to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of any material changes by posting the new privacy policy on this page and updating the "Last updated" date. We encourage you to review this privacy policy periodically.
Contact Us
If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:
privacy@invowl.com
Support
support@invowl.com
Address
InvOwl B.V.
Blaak 16
3011 TA Rotterdam
Netherlands
For data protection inquiries, you may also contact your local data protection authority.