Privacy Policy

Secure Cloud Hosting

Invoice45 is hosted on secure servers managed by All Web Tech. Our hosting arrangement ensures:

• Professional-grade server infrastructure with enterprise-level security
• Regular security updates and monitoring
• Reliable uptime and performance
• Secure data centers with physical security measures
• Regular automated backups to prevent data loss

Data Privacy and Access

• Each user account has isolated data storage — you can only access your own data
• Production databases are encrypted and access-controlled
• No hosting provider personnel can view or access your business data
• Development and support teams work only with anonymized test data
• All data access is logged and monitored for security

Information We Collect and Store

To provide you with Invoice45's services, we collect and securely store the following information:

• User Account Information: Your name, email address, and encrypted password
• Company Information: Your business name, address, contact details, and tax information
• Customer Data: Information about your customers including company names, contact information, and billing addresses
• Business Data: Services you offer, proposals you create, invoices you generate, and payment records
• Application Settings: Your preferences, configurations, and customizations

All this information is stored securely in your isolated account and is never shared with All Web Tech, their associates, or any third parties.

Security Measures

• Password Security: All passwords are hashed using bcrypt with 12 salt rounds
• Authentication: JWT tokens with HTTP-only cookies for secure session management
• Input Validation: All user inputs are validated and sanitized
• SQL Injection Protection: Parameterized queries prevent database attacks
• Data Isolation: Users can only access their own data

Our Security Commitment

Your Responsibilities

• Keep your password secure and confidential
• Log out of your account when using shared devices
• Report any suspicious activity immediately
• Review and comply with applicable data protection regulations for your business
• Inform your customers about how their data is used

Your Rights

• Access: View and access all your data at any time through the application
• Modification: Update or correct any information through the user interface
• Deletion: Delete individual records or request complete account deletion
• Portability: Export your data in CSV format for customers and services
• Privacy: Your data remains private and is never accessed by hosting providers

Data Retention and Backups

• Active Data: Your data is retained as long as your account is active
• Backups: Automated backups are maintained for disaster recovery purposes
• Account Deletion: Upon account deletion request, all data is permanently removed within 30 days
• Backup Removal: Backup data is purged according to our retention schedule after account deletion

We recommend you periodically export your data for your own records, especially for accounting and legal purposes.

GDPR Compliance

• You are the data controller for your customer data stored in Invoice45
• Invoice45 acts as a data processor, providing you with tools to manage data
• We implement technical and organizational measures to protect data
• You can exercise data subject rights (access, rectification, erasure) through the application
• Data export functionality enables data portability compliance

Other Regulations

Depending on your location and business, you may need to comply with:

• CCPA (California Consumer Privacy Act)
• PIPEDA (Personal Information Protection and Electronic Documents Act — Canada)
• Industry-specific regulations (HIPAA, PCI DSS, etc.)
• Local data protection laws