Privacy Policy

Last updated: 2 September 2026

1. What we store

Your account details (email address), your business profile and logo, your customers, catalogue items, documents, payments, expenses, employee payroll records and any files such as proof-of-payment uploads. We only store what the app needs to work.

2. How it is protected

All data is stored in a secure managed PostgreSQL database with row-level security, so every record is locked to the account that created it. Traffic is encrypted in transit (HTTPS), passwords are hashed and never visible to us, and no other INVOIQ user can read your records.

3. Client information

Details you capture about your clients belong to you and are used only to produce and send your documents. We do not sell, rent or share client data, and we never market to your clients.

4. Shared document links

When you share an invoice, that link contains a private random token and shows only that single document plus the proof-of-payment form. It is not indexed by search engines, and it exposes nothing else from your account.

5. Service providers

We use trusted processors purely to run the service: our cloud database and file storage provider, and PayFast for subscription payments. Card details are handled by PayFast and never reach INVOIQ.

6. Retention and deletion

Your data is kept for as long as your account is active. You can delete individual records at any time, and you can ask us to delete your entire account and its data — we will action it within a reasonable period, apart from records we must keep for legal or tax reasons.

7. Your rights (POPIA / GDPR)

You may request access to, correction of, or deletion of your personal information, and you may object to processing. Contact us through the support address in the app and we will respond.

8. Cookies and local storage

We only use storage that keeps you signed in, remembers your theme, and lets the installed app work offline. No advertising or third-party tracking cookies are used.