Privacy Policy

1. Client-Side Data Architecture

Unlike legacy cloud invoicing applications that store every line item in central databases, Invoice-Gen.net operates as a client-side first architecture. When you create or modify an invoice, all data is retained directly in your browser's local sandbox memory (localStorage and sessionStorage).

Your confidential financial figures, client addresses, and tax numbers remain securely on your computer or mobile device.

2. Payment Gateway Information (Stripe & PayPal)

When you upgrade to Pro or purchase a Lifetime license, payment transactions are conducted through PCI-DSS Level 1 certified processors:

• Stripe: Processes credit and debit cards (Visa, Mastercard, American Express, Discover) with 256-bit AES end-to-end tokenization. Invoice-Gen.net never receives or stores your full 16-digit credit card number or CVV code.
• PayPal: Processes express checkout and PayPal balances under PayPal’s global financial privacy standards.

All communications between your browser and payment gateways are encrypted with TLS 1.3 cryptographic protocols.

3. Google User Data & OAuth 2.0 Policy

Invoice-Gen.net offers optional Google Sign-In powered by Google Identity Services to provide convenient and secure authentication.

• Data Accessed: When you sign in with Google, we access your basic public profile information: your verified email address, full name, and avatar image.
• Purpose of Collection: We use this Google user data solely to authenticate your identity, establish your session, personalize your navigation bar, and associate your custom invoice drafts with your account.
• Zero Third-Party Sharing: We do not sell, rent, monetize, or transfer your Google user data to third parties, data brokers, or advertising networks.
• Zero AI Model Training: Your Google user data is not used to train generalized artificial intelligence (AI) or machine learning models.
• Data Retention & Deletion: You may sign out at any time or request complete deletion of your account and associated data by emailing privacy@invoice-gen.net. You can also revoke access anytime through your Google Security Permissions page.
• Google API Limited Use Disclosure: Invoice-Gen.net's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Cookies & Local Storage

Invoice-Gen.net does not deploy third-party advertising tracking cookies. We utilize browser localStorage strictly for functional purposes:

• invoicegen_draft: Keeps your current invoice draft saved locally so you don't lose work on page refresh.
• invoicegen_lang: Remembers your selected display language (e.g. English, Bengali, Spanish).
• invoicegen_user: Stores basic authentication state when you sign in.

You can clear this data at any time by clearing your browser's local cache or clicking Reset Form.

5. Vector PDF Generation Security

Our PDF generation engine is powered by client-side JavaScript (jspdf and native Canvas rendering). When you click Download PDF, the document binary is assembled entirely within your client browser and delivered as a local file download. No document copies are retained on third-party cloud buckets.

6. Your Rights Under GDPR and CCPA

Because Invoice-Gen.net does not store centralized databases of personal invoice data, you retain 100% control of your records. You have the right to erase, export, or modify any invoice draft directly through your browser at any moment.

7. Privacy Inquiries & Contact

If you have any questions or feedback regarding our privacy practices, please contact our privacy compliance team at: