Privacy
This describes what the application actually does today.
A guest invoice
An invoice made on the generator without an account is stored in your browser's local storage on that device only. It is not sent to Invoira's servers and no one else can read it. "Clear this invoice" deletes it, as does clearing your browser data. If you create an account from that page, it is uploaded once, into your account, at that point.
With an account
Invoira stores your email address and sign-in credentials, your business details and optional logo, your clients, services, invoices, payment entries and the activity history of each invoice. Records are owned by your account and access rules are enforced by the database, not by the screen: another account cannot read or change your rows or your uploaded files. Logo files are held in private storage and are served through short-lived links to you.
Share links
When you share an invoice, the link contains a long random token. Anyone with the link can see that one invoice's customer-facing details — business identity, invoice details, balance, payment instructions and the PDF. Internal notes, your other invoices and your account are not reachable through it. These pages ask search engines not to index them and limit what is sent to other sites in the referrer. You can revoke a link at any time.
Payments
Invoira does not process your customers' payments and never sees their card or bank credentials. Payment records are entries you type yourself. No subscription payment provider is connected to Invoira at present, so no billing details are collected either.
Email and processors
Sending invoices from Invoira's own email is not enabled — mail today goes through your own email or messaging app, under your control. The application runs on managed hosting and a managed database; the specific providers and regions should be named here by the owner before this page is published.
Deleting things
You can delete clients, services and drafts from within the application. Issued invoices are kept as historical records and can be archived or voided rather than silently changed, because they are financial documents someone else may hold a copy of.
Questions: see contact.