Legal
Privacy Policy
We built Invoistic to keep your business records private. This policy explains what we collect, why, who helps us run the service, and the choices you have.
1. Who we are
Invoistic LLC (“Invoistic”, “we”) provides software that contractors use to send estimates and invoices, get paid, and run jobs and crews. This policy explains what personal information we collect, how we use it, and your choices. It covers our websites, web application and mobile applications.
2. Information we collect
- Account information: your name, email address and company details. Passwords are handled by our sign-in provider (Amazon Cognito); we never see or store them. If you sign in with Google, we receive your name and email from Google.
- Business records you enter: clients and their contact details and addresses, estimates, invoices, payments, jobs, expenses, receipts and other files, tasks, routes, subcontractors and equipment.
- Team and time information: users you invite, their roles, and time entries. When a team member clocks in or out with the time card and allows it, we record the device’s location at that moment. We do not track location in the background or at any other time.
- Billing information: your subscription is billed by Square. You type your card into Square’s own fields; we receive the plan, status, billing dates and the card brand and last 4 digits, not your full card number.
- Usage and device information: IP address, browser and device type, and logs of requests, sign-ins and security events, used to run and protect the Service.
- Cookies: we use only essential cookies that keep you signed in and protect sign-in, and your browser’s local storage for small preferences. We do not use advertising or cross-site tracking cookies.
3. Your clients’ information
Information our customers enter about their own clients, employees and subcontractors is processed by us on our customers’ behalf, as their service provider. When a client opens a document link, we record that it was viewed and keep standard request logs. When a client pays online, the payment is handled by Square for the contractor’s own Square account; we do not receive the client’s card number. If you are a client of an Invoistic customer, contact that business with requests about your information; we will help them respond.
4. How we use information
We use information to provide and secure the Service, deliver documents and emails you ask us to send, process subscriptions, provide support, prevent fraud and abuse, comply with the law, and improve the Service. We do not sell personal information and do not share it for cross-context behavioral advertising.
5. Who we share it with
We share information only with service providers that help us run the Service, under contracts that limit their use of it, and when the law requires it:
- Amazon Web Services: hosting, databases, sign-in, file storage, malware scanning, maps and address lookup.
- Square: subscription billing and, if you connect your account, your clients’ online payments.
- Our email delivery provider: sending documents and account emails.
- Google: if you choose Google sign-in, and to read receipt photos you add to an expense so the form can be filled in for you (Gemini API, on terms that do not let Google use the content to improve its products). Only the receipt image is sent.
If Invoistic is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, subject to this policy.
6. How we protect it
Each company’s data is separated from every other company’s at the database level, connections are encrypted, uploaded files are scanned for malware and stored privately, and access by our staff is limited, protected by multi-factor authentication and logged.
7. How long we keep it
We keep information while the company account is active. After a company account is closed, we delete or anonymize its information within 90 days, except where we must keep records longer to meet legal, tax or accounting obligations, and except for encrypted backups, which expire on a rolling schedule.
8. Your choices and rights
You can view and update most information in the app, export reports, and ask us to access, correct, delete or provide a copy of your personal information by writing to privacy@invoistic.com. Depending on where you live, including California, you may have additional rights, such as to know what we collect and to limit certain uses; we honor them and will not discriminate against you for using them. We will verify requests before acting on them.
9. Children
The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect information from children.
10. Where information is stored
Information is stored and processed in the United States.
11. Changes to this policy
We will post updates here and change the effective date. For material changes we will notify company owners by email or in the app before they take effect.
12. Contact
Invoistic LLC · Privacy questions: privacy@invoistic.com · Support: support@invoistic.com