Legal

Privacy Policy

Effective date: 9 June 2026

This Privacy Policy explains how InvoiceIQ ("InvoiceIQ", "we", "us", or "our") collects, uses, shares, and protects information when you visit invoiceiq.co, use app.invoiceiq.co, contact us, request a demo, or use our invoicing, payment, compliance, cash-flow, and invoice-financing features.

1. Information we collect

We collect information you provide directly, information generated when you use the product, and limited technical information from your device.

Account and contact details, such as name, email address, phone number, WhatsApp number, password credentials, role, and login activity.
Business details, such as business name, legal name, trade name, business type, GSTIN, PAN, address, plan, KYC status, and bank account details you add for invoices or payouts.
Client and invoice data, such as customer names, emails, phone numbers, GSTINs, billing addresses, invoice line items, tax details, notes, payment status, reminders, recurring invoice settings, and PDF or email delivery metadata.
Payment, billing, and financing data, such as plan changes, usage, provider customer or subscription IDs, payment references, repayment schedules, funding requests, eligibility outputs, and audit events.
Compliance data, such as GST validation status, e-invoice or e-way bill previews, generated payload snapshots, warnings, reference numbers where available, transporter details, and compliance logs.
Lead and support data, such as demo requests, sales requests, business name, email, WhatsApp number, source, submitted time, and messages you send us.
Technical data, such as IP address, browser or device information, pages visited, request logs, cookies, and security events needed to operate and protect the service.

2. How we use information

To create and manage accounts, business profiles, roles, authentication, and team access.
To create invoices, estimates, clients, reminders, recurring invoices, dashboards, reports, and cash-flow insights.
To evaluate invoice-financing eligibility, process funding requests, support repayments, and manage related operational reviews.
To support GST, tax, e-invoice, e-way bill, and compliance workflows, including previews, validations, audit trails, and provider-assisted processing where enabled.
To process billing, subscriptions, online payments, mandates, refunds, disputes, and provider callbacks through payment partners.
To contact you about demos, onboarding, support, product updates, security notices, and service messages.
To prevent fraud, enforce access controls, debug errors, improve performance, and protect InvoiceIQ, our users, and third parties.
To comply with law, tax, accounting, regulatory, dispute, and record-keeping obligations.

3. Cookies and similar technologies

We use cookies and similar technologies for login sessions, security, preferences, performance, and analytics. Some cookies are essential for the service to work. You can control cookies through your browser, but disabling essential cookies may affect login or product features.

4. Google user data

When you choose to sign in with Google, InvoiceIQ uses Google OAuth scopes limited to openid, email, and profile. We access your Google account identifier, verified email address, basic profile name, and profile picture. We do not request access to Gmail, Google Drive, Google Calendar, Contacts, or other Google Workspace content.

Data accessed: Google account ID, verified email, email verification status, display name, and profile picture.
Data usage: To authenticate authorized users, create or link an InvoiceIQ account, protect admin access, keep audit and login records, and display basic account identity inside the product.
Data sharing: We do not sell Google user data. We share it only with infrastructure, hosting, database, security, email, and support providers that help us operate InvoiceIQ; with authorities where legally required; or with professional advisers under confidentiality.
Data storage and protection: Google user data is stored in our user database with access controls, secure authentication cookies, transport security, audit logging, and operational safeguards.
Retention and deletion: We retain Google user data while the account remains active and as needed for security, audit, legal, fraud-prevention, and dispute purposes. You can request deletion by emailing contact@invoiceiq.co.

InvoiceIQ's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. How we share information

We do not sell your personal information. We share information only where needed to provide, protect, or improve the service.

With service providers that host infrastructure, databases, email, support tools, analytics, security, and product operations.
With payment providers, such as Razorpay or Stripe, to process subscriptions, payments, mandates, callbacks, and related verification.
With compliance, GST, e-invoice, e-way bill, lending, verification, or financing partners when you request or enable those workflows.
With your invited team members and authorized users according to the roles and permissions configured in your account.
With customers or counterparties when you send invoices, reminders, payment links, statements, or recurring payment approval requests.
With authorities, regulators, courts, or professional advisers where required by law or necessary to protect rights, safety, security, or prevent fraud.
In connection with a merger, financing, acquisition, restructuring, or sale of all or part of our business, subject to appropriate confidentiality protections.

6. Data retention

We keep information for as long as needed to provide the service, comply with legal, tax, accounting, audit, financing, and dispute obligations, and maintain security records. Business, invoice, payment, compliance, and audit records may need to be retained even after an account is closed. Where retention is no longer needed, we delete, aggregate, or anonymize information using reasonable measures.

7. Security

We use reasonable technical and organizational safeguards designed to protect information, including access controls, secure authentication cookies, encryption where appropriate, audit logs, and operational monitoring. No internet service is completely secure, so you are responsible for using strong passwords, limiting team access, and keeping your account credentials confidential.

8. Your choices and rights

You can access and update much of your account and business information inside the product. You may also contact us to request access, correction, deletion, export, restriction, withdrawal of consent, grievance redressal, or nomination of another person to exercise your rights where applicable, subject to identity verification and legal retention requirements. We may decline requests where we must retain data for tax, compliance, fraud-prevention, financing, dispute, or legal reasons.

9. Children's privacy

InvoiceIQ is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 18.

10. International processing

We primarily build for Indian businesses, but our service providers may process information in India or other countries. Where information is processed outside your location, we use reasonable safeguards consistent with applicable law and our service needs.

11. Changes to this policy

We may update this Privacy Policy as InvoiceIQ evolves. If changes are material, we will take reasonable steps to notify users through the website, product, or email. The effective date above shows when this policy was last updated.

12. Contact us

For privacy questions, Google user data questions, deletion requests, or other privacy requests, contact us at contact@invoiceiq.co.