📄 Data Privacy Addendum (DPA)
Privacy Policy, Consent to Process, Data Control Overview
This DPA (Data Privacy Addendum) applies to websites invoiceninja.com, app.invoiceninja.com including all subdomains, and invoiceninja.org (the "Sites") owned and operated by Invoice Ninja, LLC (collectively, "Invoice Ninja", "we", "us", or "our").
This Privacy Policy describes how Invoice Ninja collects, uses, shares and secures the personal data you provide to us. It also describes your options in deleting/purging your data permanently from Invoice Ninja in compliance with GDPR.
Personal Identifiable Information (PII) is any information that relates to an identified or identifiable individual. PII is provided directly to us through your account registration & use.
Third Party Data Access
GDPR requires that Invoice Ninja disclose 3rd party vendors which interact with your data. In order to operate the Invoice Ninja system, the following parties receive partial data that you provide:
- Cloudflare (hosting)
- OVH Cloud (hosting)
- Linode (hosting)
- Google Apps (customer service)
- Stripe (paid accounts only)
- PayPal (paid accounts only)
- Postmark App (transactional emails)
- MailGun (transactional emails)
Portability: Exporting Account Data
You are able to export your data in a variety of formats at any time. When logged in to your account, navigate to Settings → Import/Export and select CSV, XLS, or JSON format. You can export all your data or selectively export: Clients, Contacts, Credits, Tasks, Invoices, Quotes, Recurring, Payments, Products, Expenses, Vendors, Vendor Contacts.
Portability: Exporting Documents (Enterprise Plans)
Enterprise accounts can export all uploaded documents (attached to invoices, quotations, and proposals) as a ZIP folder via Reports → Type: Document. Select a date range, choose "ZIP – Documents", and click Export.
Restriction / Erasure: Purging PII Account Data
The below three methods of data purge are final, total, and irreversible.
- Account deletion: Settings → Account Management → Danger Zone → “Delete Company.” Purges all account & company data permanently.
- Company data purge: Settings → Account Management → Danger Zone → “Purge Data.” Purges all account data; your account login remains active.
- Individual client purge: From within the client view page, click “Edit Client” dropdown → “Purge Client.” All contact info, invoices, quotes, payments, proposals, and projects for that client are permanently removed.
Data Retention Policy
Free accounts inactive for three (3) months will be considered "ghost" accounts and scheduled for irreversible deletion. Log in regularly to retain access to your account and data.
Cookies
We use traffic log cookies to identify which pages are being used. This helps us analyze data about web page traffic and improve our website. We only use this information for statistical analysis purposes and then the data is removed from the system. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
Google & Microsoft Login
You can log in to our site using sign-in services such as Google or Microsoft. These services will authenticate your identity and provide you the option to share certain personal information with us such as your name and email address to pre-populate our sign-up form.
Newsletter & Email Communications
By agreeing to these Terms, you agree to receive periodic communications from us, including newsletters, promotional offers, and service updates sent via email. You can opt out at any time by clicking "unsubscribe" in any newsletter footer, or by emailing legal@invoiceninja.com.
Note that Invoice Ninja follows CAN-SPAM Act and GDPR guidelines.
Links to Other Websites
Our website may contain links to other websites. Once you have used these links to leave our site, Invoice Ninja is not responsible for the data protection and privacy of any information which you provide whilst visiting any 3rd party site.
Communication & Resolution
Users with questions regarding account privacy, data use, or any concerns should contact: