Privacy Policy

Introduction

InvQ is committed to protecting your professional and personal data. This policy explains how we handle your information to provide a secure invoicing experience.

Data Ownership

Your invoices, client lists, and expense records belong solely to you. We do not sell your data to third parties. All data processed is used exclusively for app functionality, such as AI scanning and report generation.

Information We Collect & Security

• • Profile Info: Business name, GSTIN, and email for document generation.
• • Transactional Data: Invoice details, expenses, and client records.
• • Device Diagnostics: We collect diagnostic logs to improve app performance. For your security, these logs are encrypted with AES-256 on your device before transmission, and all PII (emails, names, amounts) is automatically redacted and masked at the source.

Data Storage & Encryption

We use Supabase (PostgreSQL) for secure cloud storage. All data is protected via Row-Level Security (RLS). Locally, sensitive session data and encryption keys are stored using the device's Hardware Secure Enclave (Keychain on iOS and Keystore on Android).

Account Deletion & Data Retention

You have the "Right to be Forgotten". You can initiate account deletion at any time via Settings. To prevent accidental data loss, we implement a 14-day "Safety Net" period. During this time, your data is marked for deletion but remains recoverable should you choose to cancel the request. After 14 days, all personal data, invoices, and backups are permanently and irreversibly purged from our servers.

Automated Communication

If you enable automated email triggers or reminders, we process your contact names and email addresses transiently to deliver these communications. We do not store or read the contents of your emails for any purpose other than delivery tracking.

Financial Integration

For features like TDS Reconciliation, we match your invoice data against your tax statements (e.g., 26AS). This processing is automated and occurs securely within our encrypted environment to help you verify tax credits.

Third-Party AI Services

We use Enterprise-grade AI (Google Gemini) for features like receipt scanning and tax assistance. Your documents are processed transiently and are NOT used to train these models. Your data remains private and is never exposed to the public model history.

Compliance & Governance

InvQ is designed to comply with India's Digital Personal Data Protection (DPDP) Act. You have the right to access, correct, and delete your data at any time. Our data residency is maintained in secure regions to ensure the highest standards of safety.