Privacy Policy

This policy covers the InvoiceKit website and the InvoiceKit Android app. InvoiceKit is operated by Equisteg, India (“we”, “us”), the data controller for the limited processing described below. Contact: support@equisteg.com.

The short version

• No accounts. Your documents, clients, items and business details are stored only on your device.
• We have no database of users or documents, and we never receive what you type into an invoice.
• Free users see ads from Google AdSense, which uses cookies subject to your consent where the law requires it.
• Pro payments are processed by Razorpay; we never see your card, UPI or bank details.
• From a purchase we receive only the Razorpay payment or subscription ID and its status, and we store nothing.

Information you enter

Everything you type (your business details, client names and addresses, line items, prices, notes, logos and signatures) and your settings are stored in your browser’s local storage on the website, or in the app’s private storage on Android. It is never sent to our servers. Logos and signatures are resized in your browser and stored the same way. You can delete everything with “Clear saved data” in the editor, by clearing this site’s data in your browser, or by uninstalling the app.

Backups you export are files on your device; where you keep or share them is up to you. PDFs are created by your browser’s print function on your device.

Advertising and cookies

If you do not have Pro, the website loads Google AdSense to show ads (the Android app uses Google AdMob). Google and its partners may use cookies, device identifiers and similar technologies to show, personalise and measure ads and to prevent fraud. Ads are never shown inside your documents or PDFs, and the ad script is not loaded at all for Pro users.

• Consent: in the European Economic Area, the United Kingdom and Switzerland, a consent message from Google’s certified consent management platform asks for your choice before personalised ads are shown. You can change your choice through that message at any time; in the app, under Settings → Ad privacy.
• More information and opt-out: How Google uses information from sites that use its services and Google Ad Settings.

We do not use analytics cookies or any other tracking.

Purchases (Pro)

Pro is sold on the web by Equisteg, and payments are processed by Razorpay Software Private Limited (“Razorpay”). When you click Buy, Razorpay’s checkout script (from checkout.razorpay.com) is loaded on that page only, and Razorpay’s secure window collects your payment details (card, UPI, net banking or wallet) and the contact details it needs, such as your email address and phone number for the receipt and fraud checks. Razorpay processes this under its own privacy policy. We never see or store your payment details, email address or phone number; the checkout script is not loaded on any other page or for any other purpose.

From Razorpay we receive only what is needed to switch Pro on: the payment or subscription ID, the plan and its status (paid, refunded, cancelled). Our server checks this with Razorpay and does not store it. Nothing you have typed into a document is ever part of a checkout. On Android, purchases go through Google Play.

Licence checks

Your licence key is the Razorpay payment ID (Lifetime) or subscription ID (Yearly). After you pay or restore Pro, and about once a week afterwards, your browser sends that ID to our server (a Cloudflare Worker). The server asks Razorpay whether the purchase is still paid and returns a short-lived signed token, which is stored in your browser together with the ID. The server does not store the ID, the token or any information about you. The token contains only the plan, the store and the validity dates.

Technical logs and error reports

Like any website, our hosting provider (Cloudflare) processes IP addresses and request details to deliver pages and protect against abuse. If the site hits an error, your browser may send a short technical report (error message, code location and page path) to help us fix it. Reports never include document content, and emails, numbers and quoted text are removed before sending and again on the server. Logs are kept only briefly.

Children

InvoiceKit is a business tool and is not directed at children under 13 (or the minimum age in your country).

Your rights

Because your documents never reach us, you control them directly on your device. For anything else, including questions about advertising data or a purchase, contact support@equisteg.com. You may also complain to your local data protection authority. Razorpay and Google handle requests about the data they process; see their privacy policies.

Changes

If this policy changes we will update the date above and, for important changes, show a notice on the site. See also the Terms and Refund policy.