Privacy Policy

What we collect

When you use Invoice Analyser, we store:

• your account details: email address and, if you add them, your business name, contact name and phone number;
• the invoices you upload or forward, including the attached files and the data our extraction pipeline pulls from them (supplier, dates, amounts and line items);
• supplier contact details and notes you enter;
• a record of each email forwarded to your inbound address (sender, subject, time and what happened to it) and of each email we send you;
• when you sign in, and basic server logs needed to operate the service.

On this site we set one cookie, which keeps you signed in. We do not use advertising or analytics trackers.

How we use it

Your invoice data is used solely to power the features you signed up for: extraction, price-change detection, spend analytics, and alerts on your own account. We do not sell your data, and we do not use your invoices to train models shared across other customers.

Where it is stored and who can see it

Your account data and invoice files are stored on our server in Sydney, Australia. Invoice files are kept in a private directory that is not reachable from the web. The people who run Invoice Analyser can access account data, email records and database backups when that is needed to operate and support the service.

Third parties

These providers handle your data on our behalf, each under its own data-processing terms:

• Auth0 (Okta) for sign-in. If you sign in with Google or Microsoft, that provider shares your name, email address and profile picture with us.
• Resend for sending and receiving email. Every email you forward, with its attachments, passes through Resend.
• An LLM provider (Anthropic or OpenAI, depending on configuration). The text of each forwarded email and uploaded invoice, and any invoice images, is sent to it to decide whether it is an invoice and to extract the data. A digest of your spend and price history with a supplier is sent to write that supplier's summary.
• DigitalOcean for hosting the server.
• Stripe for payments, if you subscribe to a paid plan. Card details go straight to Stripe and never reach our server.

Sign-in data is held in Auth0's Australian region. Resend, the LLM provider and Stripe process data outside Australia, mainly in the United States.

Data retention & deletion

Your data is retained for as long as your account is active. You can delete individual invoices at any time from the Invoices page, and download a copy of your data from the app before you go: Data → Export → Full account gives you a zip of your profile, suppliers, invoices, price alerts, email activity and the original invoice files.

You can delete your account yourself at any time under Settings → Danger zone → Delete account. This immediately and permanently removes your invoices and their stored files, suppliers, price alerts, email activity and your login, and cancels any subscription. If you can't sign in, email us at the address below and we'll do it for you.

Database backups are kept for no more than 30 days, so a deleted invoice or account can remain in a backup for up to 30 days before it is gone for good.

Resend keeps its own copy of each email you forward, with its attachments, for 30 days after it arrives and then deletes it. Resend gives us no way to remove that copy sooner, so an email forwarded in the 30 days before you delete an invoice or your account stays with Resend until that period runs out. When you delete an invoice we discard the reference we would need to fetch its email from Resend again.

Email sent to an address at our domain that doesn't belong to an account, and email to our contact addresses, is logged with the sender's address and subject line. Those log entries are deleted after 30 days.

Stripe may keep records of past payments for as long as the law requires.

Contact

Questions about this policy? Email privacy@invoiceanalyser.com.