Privacy Policy

The short version

• Your records are created and kept in your browser's own storage on your device.
• Photos and PDFs of the documents you scan, and your business logo, are never uploaded — they stay on the device that made them, or go into an encrypted backup file that only you hold.
• Reading text off a document happens in your browser. The image is not sent anywhere to do it.
• We run no analytics, no advertising trackers and no third-party cookies.
• When the app breaks we record what broke — never who it happened to. Those reports carry no name, no account and no device identifier, so there is nothing in them to trace back to you.
• We never sell your data, and we never email your clients on your behalf.

Who is responsible

Craft75 is responsible for the personal data described here. The app is invoict.craft75.com. Our registered business address is 2310 Vance Avenue, Suite 202, Chattanooga, TN 37404. For anything privacy-related, email support@craft75.com.

What is stored on your device

Invoictis local-first. Everything you create is written to your browser's IndexedDB storage before anything else happens, which is why the app works with no signal and with no account. That local store holds:

• your business profile — name, email, phone, address, tax ID, currency, default terms and logo;
• your clients and their contact details;
• your invoices, their line items and their payment history;
• bills and receipts you file, and the details read from them;
• the original photo or PDF of each document, if you have chosen to keep originals;
• your categories and filing rules;
• app settings, and a record of which plan you have.

This data is not ours to reach. It sits in your browser, under your control, and clearing your browser's site data removes it.

When your records leave the device

Cloud sync is part of Plus Cloud. Without it, nothing you create is uploaded — our server refuses to accept it, so this is enforced rather than promised. With it, a copy of your records is mirrored to Convex, our hosting and database provider, so that they survive a lost device and can appear on your other devices. What is mirrored is: your business profile, clients, invoices, payment ledger entries, filed bills and receipts, categories and filing rules.

If a subscription ends, we stop accepting new uploads but keep letting you read back what is already there. Cancelling should not put your own invoices out of reach.

Before you sign in, that copy is filed under a random key generated on your device rather than under your name — it is not linked to an email address or an identity. When you sign in, the records already synced from that device are claimed onto your account, and everything after that is filed under your account.

Three things are never sent to our servers, by design and not by policy alone: the original photos and PDFs of your documents, your business logo, and your card details.

Because those originals are never uploaded, an encrypted backup is the only way to keep them if you lose the device. Settings → Backup writes them into a single encrypted file, locked with a passphrase you choose, saved wherever you tell your browser to put it. That file never touches our servers — it is made on your device and handed to you. We cannot open it, and we cannot help you recover it if you forget the passphrase.

When something goes wrong

When Invoicthits an error, it sends us a short report so we can fix it. That report contains the technical description of the fault, where in the app it happened, which version of the app you were running, and a broad category of browser — for example “Safari on iPhone”. It goes to our own servers at Convex. No third-party crash or analytics service is involved.

These reports are not linked to you. They carry no name, no email address, no account id and no device key — not even the random sync key described above. We cannot tell which reports came from the same person, or from you specifically, and we have deliberately built it that way rather than collecting the link and promising not to look. That is also why there is nothing here to delete when you delete your account: no report was ever about a person.

Before a report leaves your device it is scrubbed of anything shaped like your data — email addresses, phone numbers, amounts of money, record identifiers, file paths and any quoted value — and replaced with a placeholder. So a fault reads to us as “rejected the email address”, never as the address itself. Reports are deleted automatically after 90 days.

What we get from this is the ability to notice that something is broken for a lot of people on one kind of phone. What we do not get is any way to follow a person around.

Who else handles your data

These are all of them. We do not use anyone else, and we do not sell or share your data with advertisers.

• Clerk — signing in. Handles your email address, your sign-in credentials and your session. Only involved if you choose to make an account.
• Convex — hosting the synced copy of your records described above, running the scheduled jobs behind reminders, and storing the unlinked fault reports described above.
• Stripe— payments. You enter your card on Stripe's own checkout page; we receive back only which plan you bought, your Stripe customer and subscription identifiers, and whether the subscription is currently paid up. We never see your card number.
• Postmark — sending the transactional email described below. It receives the recipient address and the contents of that email.
• Photon (Komoot) — address suggestions, and only if you leave that feature switched on. See below.

Address suggestions, and how to turn them off

When you type an address, Invoict can send what you have typed so far to Photon, an open-map address search service, to suggest matches. Only the address text goes — no name, no invoice, no account. Nothing is sent until you have typed at least four characters.

This is a switch you control. Settings → Privacy → Address lookup turns it off, and with it off the app still suggests from the addresses you have already saved — nothing leaves your device at all.

Email we send

On the Plus Cloud plan, Invoict can email you when an invoice is coming due or has gone overdue. Those reminders go to the business email address on your own business profile, sent through Postmark.

We never automatically email your clients. The app nudges you, and you decide what to send them and when. Every automated send is recorded so you can see what went out.

Cookies and tracking

Invoict sets no analytics or advertising cookies, and there are no third-party trackers in the app. The fault reports described above are not tracking either, and not only because we say so: they carry no identifier of any kind, so there is nothing in them capable of following you between sessions. If you sign in, Clerk sets the cookies it needs to keep you signed in. The app also stores its own data in your browser — that is your records, described above, not tracking.

How long things are kept

Records you keep are kept until you delete them. Deleting a record removes it from your device and marks it deleted on the synced copy, so your other devices remove it too.

A document you start capturing but never finish reviewing is cleaned off your device automatically after 24 hours. If you switch off Keep original documents in Settings, the photo or PDF is discarded as soon as the details have been read from it, and only those details are kept.

You can remove the synced copy yourself, without asking us: open the account panel from the header and choose Delete my account. That deletes your account and everything held under it on our servers. What is on your device stays on your device and keeps working — to clear that too, delete Invoict's data in your browser or device settings. If you would rather we did it, email support@craft75.com and we will.

What you can do

• Export everything to CSV from Settings, at any time, on any plan.
• Turn address lookup off, so no address text ever leaves your device.
• Turn off keeping original documents, so the images are never stored.
• Use the app entirely signed out, in which case no account exists.
• Ask us for a copy of, or the deletion of, anything held on our servers.

Depending on where you live you may also have a legal right to access, correct, export or erase your personal data, and to object to how it is handled. Email support@craft75.com and we will help — we will not ask you to justify the request.

Children

Invoict is a tool for running a business and is not intended for children. We do not knowingly collect data from anyone under 16.

Changes to this policy

If what we do with your data changes, this page changes with it and the date at the top is updated. Your use of the app is also covered by our Terms of Service.