Privacy Policy

📄 Data Privacy Addendum (DPA)

Privacy Policy, Consent to Process, Data Control Overview

This DPA (Data Privacy Addendum) applies to websites invoiceninja.com, app.invoiceninja.com including all subdomains, and invoiceninja.org (the "Sites") owned and operated by Invoice Ninja, LLC (collectively, "Invoice Ninja", "we", "us", or "our").

This Privacy Policy describes how Invoice Ninja collects, uses, shares and secures the personal data you provide to us. It also describes your options in deleting/purging your data permanently from Invoice Ninja in compliance with GDPR.

Personal Identifiable Information (PII) is any information that relates to an identified or identifiable individual. PII is provided directly to us through your account registration & use.

Third Party Data Access

Portability: Exporting Account Data

You are able to export your data in a variety of formats at any time. When logged in to your account, navigate to Settings → Import/Export and select CSV, XLS, or JSON format. You can export all your data or selectively export: Clients, Contacts, Credits, Tasks, Invoices, Quotes, Recurring, Payments, Products, Expenses, Vendors, Vendor Contacts.

Portability: Exporting Documents (Enterprise Plans)

Enterprise accounts can export all uploaded documents (attached to invoices, quotations, and proposals) as a ZIP folder via Reports → Type: Document. Select a date range, choose "ZIP – Documents", and click Export.

Restriction / Erasure: Purging PII Account Data

The below three methods of data purge are final, total, and irreversible.

Data Retention Policy

Free accounts inactive for three (3) months will be considered "ghost" accounts and scheduled for irreversible deletion. Log in regularly to retain access to your account and data.

Cookies

We use essential cookies to operate the Sites. We also use Google Analytics, a service of Google LLC, to understand how the Sites are used. Google Analytics sets cookies (such as _ga) that last up to two years and do not directly identify you; we do not share your name, email address or account data with Google. Visitors in the EU, EEA, UK and Switzerland are asked for consent before analytics cookies are set and may change their choice at any time through the cookie settings on the Sites. Analytics within the Invoice Ninja app is governed by our Terms of Service.

Google & Microsoft Login

You can log in to our site using sign-in services such as Google or Microsoft. These services will authenticate your identity and provide you the option to share certain personal information with us such as your name and email address to pre-populate our sign-up form.

Newsletter & Email Communications

By agreeing to these Terms, you agree to receive periodic communications from us, including newsletters, promotional offers, and service updates sent via email. You can opt out at any time by clicking "unsubscribe" in any newsletter footer, or by emailing legal@invoiceninja.com.

Note that Invoice Ninja follows CAN-SPAM Act and GDPR guidelines.

Links to Other Websites

Our website may contain links to other websites. Once you have used these links to leave our site, Invoice Ninja is not responsible for the data protection and privacy of any information which you provide whilst visiting any 3rd party site.

Google API Services User Data

Invoice Ninja integrates with Google services to provide user-authorized functionality.

Data Access and Usage

Google Sign-In: Accesses basic account information, including name and email address, for authentication.
Gmail: Uses send-only permissions to send emails initiated or configured by users within Invoice Ninja. Invoice Ninja does not read or access Gmail inbox contents.
Google Calendar: Uses read-only permissions to retrieve calendar lists and events for display and integration within Invoice Ninja. Invoice Ninja does not create, modify, or delete Google Calendar events.

Data Storage and Security

Google OAuth credentials and any retained Google user data are protected using appropriate security measures, including access controls and encrypted connections to Google APIs. Data is retained only as necessary to provide authorized functionality.

Data Sharing

Invoice Ninja does not sell Google user data or share it with third parties for advertising purposes. Data is processed only to provide the integrations authorized by users, except where disclosure is legally required.

Revocation and Deletion

Users can revoke access at any time through their [Google Account settings](https://myaccount.google.com/connections). Users may request deletion of retained personal data by contacting Invoice Ninja through its published privacy contact channels.

Google Limited Use Disclosure

Invoice Ninja's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Communication & Resolution