Privacy Policy
Effective date: September 30, 2026
Invosmith ("we", "us") operates invosmith.com, an invoice generator with optional account and Pro features. This policy describes what data we handle. The free, no-account generator keeps invoice drafts in your browser; account features process the information you choose to save or send.
Your invoice data stays in your browser
Everything you type into the invoice generator — your name, your client's details, line items, amounts, logos — is processed entirely in your browser. It is not transmitted to or stored on our servers. When you download a PDF, the file is generated on your device.
To make the tool convenient, your draft invoice is saved in your browser's local storage on your own device, so you can close the tab and pick up where you left off. You can erase it at any time with the "Clear all" button in the generator, or by clearing your browser's site data. We have no access to it and no copy of it.
What we do collect
Account and workspace data. If you create an account or use saved, sending, tracking, recurring or AI-assisted features, we process the account details, business settings, client and document information, delivery events and files needed to provide those features. We do not use this information for advertising.
Billing data. Payments are processed by our payment provider. We receive identifiers, subscription status and transaction records needed to provide access and support billing; we do not receive your full card number.
Analytics. We keep a limited first-party event log on Cloudflare D1 and may use Google Analytics 4 and Microsoft Clarity to understand page visits, product interactions, and general site performance. The event log records the event name and time, page path, feature and surface, coarse completion or error state, and pseudonymous account, session or visitor identifiers when permitted. It may also record the first referring domain, campaign source, medium and campaign name, and whether a Google click identifier was present. We do not store invoice contents, client details, line items, uploaded file contents, extracted text, payment data, full referrer URLs or URL query strings in analytics events.
For visitors in the European Economic Area, United Kingdom and Switzerland, we do not attach the pseudonymous visitor identifier or first-touch campaign fields to the first-party event log. Google Analytics 4 and Microsoft Clarity are also disabled for those visits. We use the event log to measure whether product features work, understand aggregate conversion paths, diagnose errors and improve the service. Analytics collection can be disabled operationally without affecting the invoice generator.
Server logs. Our hosting provider processes standard technical logs (such as IP addresses and request timestamps) to serve the site and protect it from abuse. We do not use these logs to identify visitors.
What we don't do
We don't sell your data. We don't show ads. We don't run third-party advertising trackers. We can't read your invoices — they never reach us.
Third-party service providers
| Provider | What it does | Data involved |
|---|---|---|
| Cloudflare | Hosting, content delivery, security, and storage of our limited first-party product event log | Standard server logs (IP address, request metadata) and the limited analytics event fields described above |
| Google Analytics 4 | Site measurement and product usage analytics | Page URLs, product events, approximate location, device and browser details, and pseudonymous identifiers |
| Microsoft Clarity | Heatmaps and session interaction analytics | Clicks, scrolling, navigation, and device and browser details; sensitive form inputs are masked |
| Stripe | Payment processing and subscription billing | Payment and subscription identifiers, transaction status and amounts, and billing details supplied during checkout; Invosmith does not receive full card numbers |
| Resend and Cloudflare Email | Sending sign-in codes, document emails and product notifications through the configured email provider | Recipient email address and the content of the message being sent |
| Sentry | Collecting application errors and operational failure codes | Sanitized error details, page path without query strings, and non-personal failure codes; customer and document content is removed before reporting |
| OpenAI | AI-assisted invoice draft intake when you choose that feature | The uploaded document or image and extracted information needed to prepare a reviewable draft |
Each provider processes data under its own privacy policy. We will update this table before any new provider touches personal data.
Cookies & local storage
Google Analytics 4 and Microsoft Clarity may set first-party analytics cookies to distinguish sessions and measure site usage outside the regions described above. Our first-party event measurement uses pseudonymous identifiers stored in cookies or browser storage when permitted. We do not use advertising cookies or show ads. Your draft invoice and tool preferences (such as currency and template style) are stored separately in your browser's local storage and do not leave your device.
Your rights
Depending on where you live, you may have rights to access, correct, export or delete personal data we hold about you. You can use available account controls or email contact@invosmith.com to make a request.
Children
Invosmith is a business tool and is not directed at children under 16. We do not knowingly collect personal data from children.
Changes to this policy
We will update this policy when our data practices materially change and show a new effective date at the top.