Privacy Policy

Effective date: May 14, 2026
Last updated: October 22, 2026

InvoiceGenie (“we”, “us”, or “our”) operates the website myinvoicegenie.com and the InvoiceGenie mobile application. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and app.

1. Information We Collect

Information you provide directly

• Account information: name, email address, business name, and password when you create an account.
• Business data: invoices, estimates, client details, appointments, payment records, and other business information you enter into the app.
• Communications: messages you send us via the contact form or support channels.

Information collected automatically

• Usage data: pages visited, features used, time spent, and actions taken within the app. In the mobile app, usage analytics is off unless you turn on the Usage Analytics setting, and it is sent only to InvoiceGenie’s own servers — never to advertising companies.
• Device information: device type, operating system version, browser type, and IP address.
• Crash reports (mobile app): if the app crashes, it sends a crash report with the names of the last screens and buttons you used, linked to an anonymous Device ID, to help us fix the problem. Crash reports do not include document, client, or payment data.
• Cookies and similar technologies: see the Cookies section below.

Device features (only if you allow them)

• Location (Tap to Pay only): if you use Tap to Pay to accept an in-person card payment, the app asks for your device’s location while the app is in use. It is used only during Tap to Pay, as required by Stripe to verify where the payment takes place and to prevent fraud. InvoiceGenie does not track your location or store it, and does not use it for any other purpose.
• Contacts: to help you find and add a client from your phone’s contacts. Your contacts are searched on your device; only the contact you choose is saved, as a client in your account.
• Microphone and speech recognition: to let you talk to Genie AI instead of typing. Your phone’s built-in speech recognition (from Apple or Google) turns your voice into text; InvoiceGenie receives only the text, never audio recordings.
• Camera and photos: to scan receipts and add photos, files, and your business logo. Only the photos and files you choose are uploaded.
• Calendar: to add an appointment to your phone’s calendar when you ask. InvoiceGenie does not read or upload the events in your calendar.
• Face ID / fingerprint: to unlock the app. The check happens entirely on your phone; InvoiceGenie never receives your biometric data.

2. How We Use Your Information

• To provide, operate, and improve InvoiceGenie services.
• To send transactional emails (invoice receipts, account verification, payment confirmations). When a business accepts a Tap to Pay payment, InvoiceGenie emails a receipt to the email address the business enters for its customer, on that business’s behalf.
• To send push notifications about your invoices, estimates, and appointments (only with your permission), and to email appointment confirmations to your clients on your behalf.
• To respond to support requests and communications.
• To detect and prevent fraud or security incidents.
• To comply with legal obligations.

3. Cookies

We use cookies and similar tracking technologies on our website. Cookies are small text files stored on your device.

Cookie	Purpose	Duration
ig_cookie_consent	Remembers your cookie consent choice (accepted or rejected)	1 year
_ga	Google Analytics — distinguishes unique visitors (only set if you accept cookies)	2 years
_ga_*	Google Analytics — stores session state for this property (only set if you accept cookies)	2 years
googtrans	Stores your preferred language for Google Translate	Session / 1 year
Session cookies	Session management for logged-in users	Session

You can control cookies through your browser settings. Disabling cookies may affect the functionality of this website.

4. Third-Party Services

• Google Analytics: we use Google Analytics 4 to understand how visitors use our website (pages viewed, session duration, traffic sources). Analytics cookies are only set if you accept cookies. Google Analytics operates in Consent Mode v2 — if you reject cookies, no identifying data is collected. You can opt out at any time using the cookie preferences button on our site, or via Google’s opt-out tool. Data is processed by Google LLC per their Privacy Policy.
• Google Translate: we embed Google’s translation widget to offer multi-language support. Google may collect data per its Privacy Policy.
• Cloud storage: business logo images are stored on a secure cloud storage provider in the United States.
• Database hosting: your business data is stored on a managed cloud database hosted in the United States.
• Push notifications: we use Apple’s and Google’s notification infrastructure to deliver push notifications to your device (only with your permission).
• Square / PayPal / Stripe: if you connect a payment processor, your transactions are handled by that provider per their privacy policy. For Tap to Pay, card details are read securely by the phone’s contactless (NFC) reader — on iPhone through Apple’s Tap to Pay on iPhone technology — and processed by Stripe; InvoiceGenie never receives or stores full card numbers.
• QuickBooks: if you connect QuickBooks, your invoice and financial data is shared with Intuit to enable synchronization, per their privacy policy.
• Genie AI: when you use Genie AI, your request and the business details needed to answer it (such as client names, items, and amounts) are sent to Amazon Bedrock, an AI service from Amazon Web Services, to generate a reply. Amazon Bedrock does not use this data to train AI models. If you rate a reply, the question and reply are stored encrypted to help us improve Genie AI. Always review Genie AI’s suggestions before you send a document.
• Receipt scanning: when you scan a receipt, the receipt image is sent to Google’s Gemini API to read details such as the merchant, date, and amounts. The image is processed under Google’s Gemini API terms.

5. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, all associated data (invoices, estimates, clients, business profiles) is permanently deleted immediately.

After you delete your account, we keep a small, encrypted deletion record for 90 days for fraud and abuse prevention and support. It contains only your organization name, the owner’s name and email address, the platform and device used, when the account was created and deleted, and how many records it held. It contains none of your invoices, estimates, clients or other business content. It is not a backup and cannot be used to restore your account or data — once you delete your account, your data is gone for good. We also keep a record that you accepted our Terms and Conditions — the terms version, the date you accepted and your email address, encrypted — for the same period, in case of a dispute; the IP address and browser details recorded when you signed up are removed when you delete your account. These records are deleted automatically after 90 days.

To prevent abuse of the free plan, the device used to create your organization stays registered after you delete your account, so it cannot be used to create another free organization. The email address and organization name linked to that device are encrypted when you delete your account and are removed after 90 days, together with the network (IP) address it was registered from. After that, only the device identifier remains, with no name, email or IP address attached. Contact support@myinvoicegenie.com if you need a device released.

When you delete an invoice, estimate, client, purchase order, expense, or appointment, it is kept for 90 days and then permanently deleted. During that time, invoices, estimates, clients, purchase orders, and expenses can be restored from Deleted Items, and account owners and administrators can permanently delete them sooner. Products and time entries are deleted permanently and immediately — they cannot be recovered. Copies in our encrypted server backups are deleted automatically when those backups expire.

6. Your Rights (GDPR & Other Regulations)

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: request a copy of the data we hold about you.
• Right to rectification: your business data is end-to-end encrypted and only accessible to you — you can correct or update it directly in the app at any time. For account-level information (email, name), contact us at support@myinvoicegenie.com.
• Right to erasure: request deletion of your personal data (“right to be forgotten”).
• Right to restriction: request that we limit processing of your data.
• Right to data portability: request your data in a machine-readable format.
• Right to object: object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at support@myinvoicegenie.com. We will respond within 30 days.

7. Data Security

We implement technical and organizational measures to protect your data, including:

• Encrypted connections (HTTPS) for all data in transit.
• Encryption of sensitive business data at rest, including the client names, addresses, and notes on your appointments. To send appointment reminders and recurring-appointment confirmation emails for you, a readable copy of only the details those messages need is kept on our servers.
• Secure token-based authentication.
• Two-factor authentication (2FA) available for all accounts.

8. Children’s Privacy

InvoiceGenie is not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Text Messages (SMS)

InvoiceGenie sends text messages from its toll-free number only to deliver verification codes that account holders request for sign-in and account security. We do not send text messages to the customers of businesses that use InvoiceGenie; payment receipts are sent by email.

• Mobile numbers are used only to send the message that was requested. We do not send marketing or promotional text messages.
• We do not sell, rent, or share mobile numbers or SMS consent information with third parties or affiliates for their marketing or promotional purposes. Messages are delivered through our SMS provider, Amazon Web Services, solely to send them on our behalf.
• Message frequency: one message per request. Message and data rates may apply.
• Reply STOP to any message to opt out, or HELP for help. You can also contact support@myinvoicegenie.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending an email to your registered address. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data:

• Email: support@myinvoicegenie.com
• Website: myinvoicegenie.com/contact