Privacy Policy

1. Introduction

FuseInvoice ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our invoice creation and management service.

FuseInvoice is a company registered in New Zealand. Our service is available to customers worldwide, including in New Zealand, the United States, and other countries. This Privacy Policy is designed to comply with applicable privacy laws, including the New Zealand Privacy Act 2020, and we strive to meet international privacy standards. By using our service, you consent to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us when you:

• Create an account: Email address, password, and any other information you provide during registration
• Set up your business profile: Business name, business email, phone number, business address (including street address, city, state/province, postal code, country), and tax information
• Create invoices: Customer information (name, email address, phone number, billing address), invoice line items, descriptions, quantities, prices, tax settings, payment terms, and notes
• Configure settings: Invoice preferences, tax settings, payment preferences, and other customization options
• Contact us: Information you provide when contacting our support team

2.2 Payment Information

We use Stripe Connect and Stripe for payment processing. When you:

• Subscribe to our service: Stripe processes your subscription payments. We do not store your full payment card details on our servers. Stripe handles all payment card information in accordance with their privacy policy and PCI DSS compliance standards.
• Set up Stripe Connect: To enable online payment processing for your invoices, you may be required to create a Stripe Connect account. This process collects additional information including business verification details, bank account information, and identity verification documents. This information is collected and processed by Stripe in accordance with their privacy policy and terms of service.
• Process customer payments: When your customers pay invoices online, payment information is collected and processed by Stripe on your connected account. We do not have access to your customers' full payment card details.

2.3 Automatically Collected Information

When you use our service, we automatically collect certain information, including:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent on pages)
• Log data (access times, error logs, performance data)
• Session information (authentication tokens, session identifiers)

2.4 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze how you use our service. You can control cookies through your browser settings, but disabling cookies may limit your ability to use certain features of our service.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To provide, maintain, and improve our invoice creation and management services
• Invoice Processing: To create, store, send, and manage your invoices and related customer data
• Payment Processing: To facilitate subscription payments and enable Stripe Connect payment processing for your invoices
• Communication: To send you invoices, payment confirmations, service-related notifications, technical notices, updates, security alerts, and support messages
• Account Management: To manage your account, process subscription renewals, and handle account cancellations
• Customer Support: To respond to your inquiries, provide customer support, and resolve technical issues
• Service Improvement: To analyze usage patterns, monitor service performance, detect and prevent fraud, and improve our service functionality
• Legal Compliance: To comply with legal obligations, enforce our terms of service, and protect our rights and the rights of our users

4. Data Storage and Location

Your data is stored securely using Supabase, a cloud database service. Our Supabase instance is located in the us-east-1 region (United States). By using our service, you acknowledge that your data may be stored and processed in the United States and other countries where our service providers operate.

Our application is hosted on Vercel, which may also process and store data in various locations as part of their global infrastructure. We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL
• Encryption of data at rest
• Access controls and authentication mechanisms
• Regular security assessments and updates
• Secure authentication and session management

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

5. Third-Party Services

We use the following third-party services to operate our service. Each service has its own privacy policy governing how they handle your information:

5.1 Stripe

We use Stripe for two primary purposes:

• Subscription Payments: Stripe processes subscription payments for our service. When you subscribe, Stripe collects and processes your payment card information. We do not store your full payment card details.
• Stripe Connect: To enable online payment processing for your invoices, we integrate with Stripe Connect. When you set up a Stripe Connect account, Stripe collects additional information including business details, bank account information, and identity verification documents. Stripe Connect allows you to accept payments directly from your customers, and Stripe processes these payments on your behalf.

Stripe's collection and use of your information is governed by their Privacy Policy and Stripe Connect Account Terms. We recommend reviewing these policies to understand how Stripe handles your data.

5.2 Supabase

We use Supabase for database storage, user authentication, and backend services. Supabase stores your account information, business data, invoices, and customer information. Supabase's data handling practices are governed by their Privacy Policy.

5.3 Vercel

We use Vercel to host and deliver our application. Vercel may process and store certain technical data (such as IP addresses and request logs) as part of their hosting services. Vercel's privacy practices are governed by their Privacy Policy.

5.4 Email Services

We use email services to send invoices to your customers and to send you service-related notifications. Email delivery may be handled by third-party email service providers. When we send invoices, we include customer email addresses and invoice details in the email content.

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With third-party service providers who perform services on our behalf (such as Stripe, Supabase, and Vercel), subject to confidentiality obligations
• Invoice Delivery: When you send an invoice, we share the invoice content and customer email address with our email service provider to deliver the invoice to your customer
• Payment Processing: Payment information is shared with Stripe for processing subscription payments and customer invoice payments
• Legal Requirements: When required by law, legal process, or government request, or to protect our rights, property, or safety, or that of our users or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets, where your information may be transferred as part of the transaction
• With Your Consent: When you have given us explicit consent to share your information

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information under applicable privacy laws (such as the New Zealand Privacy Act 2020, California Consumer Privacy Act, GDPR, and other regional privacy laws). These rights may include:

• Access: You can request access to the personal information we hold about you
• Correction: You can request correction of inaccurate or incomplete information. You can update much of your information directly through your account settings
• Deletion: You can request deletion of your personal information, subject to our legal obligations to retain certain data
• Objection: You can object to certain processing of your personal information
• Data Portability: You can request a copy of your data in a structured, machine-readable format
• Opt-Out: You may have the right to opt out of certain data processing activities, where applicable
• Account Cancellation: You can cancel your subscription at any time. Your account will remain active for the remainder of the current billing month, after which your access will be terminated

To exercise these rights, please contact us using the contact information provided at the end of this Privacy Policy. We will respond to your request within a reasonable timeframe and in accordance with applicable law. The specific rights available to you may vary depending on your jurisdiction.

8. Account Cancellation and Data Retention

If you cancel your subscription, your account will remain active and accessible for the remainder of the current billing month. After the end of the billing period, your account access will be terminated.

We retain your personal information for as long as your account is active or as needed to provide you services. After account cancellation, we may retain certain information for:

• Compliance with legal obligations (such as tax and accounting requirements)
• Resolving disputes and enforcing our agreements
• Preventing fraud and abuse
• Maintaining security and preventing unauthorized access

When we no longer need your information, we will securely delete or anonymize it, except where we are required to retain it by law.

9. International Data Transfers

As noted above, your data is stored in the United States (us-east-1 region) and may be processed in other countries where our service providers operate. By using our service, you consent to the transfer of your information to these locations. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable privacy laws.

10. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately, and we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy on this page
• Updating the "Last updated" date at the top of this policy
• Sending you an email notification (if the changes are significant)
• Displaying a notice on our service

Your continued use of our service after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

If you are not satisfied with our response to your privacy concerns, you may contact the relevant privacy authority in your jurisdiction. For New Zealand residents, you may contact the New Zealand Privacy Commissioner at www.privacy.org.nz. For residents of other jurisdictions, please contact your local data protection authority.