We collect what we need to send invoices, get you paid, and keep the app safe — your business name, your clients, your invoices, your payments. We don't sell that data to anyone. You can export or delete everything at any time.
1. The short version
InvoiceX is a product of Loop Technologies Ltd., registered in Accra, Ghana. This policy explains what personal data we collect when you use InvoiceX (the iOS app, Android app, and app.invoicex.com), and what we do with it.
If you only read one section, read this one:
- We collect account data (your email, business name, VAT number), invoice data (line items, clients, payment status), and usage data (which screens you open, errors the app hits).
- We use it to operate the service, prevent fraud, and improve the app — nothing else.
- We do not sell your data, run ads against it, or train models on the contents of your invoices.
- You can export, correct, or delete your data from Settings → Privacy at any time.
2. What we collect
You give us: your name, email, phone number, business name, VAT/TIN, logo, bank or mobile-money details for payouts, and everything you type into invoices and client records.
Your customers give us (through you): their name, contact info, and the contents of invoices you send to them.
We collect automatically: device model, operating system, app version, IP address, approximate location (city-level), crash reports, and product analytics (e.g. "user opened New Invoice"). We do not read SMS, your contacts, or your photos unless you explicitly attach one to an invoice.
3. How we use it
- Run the service: save your invoices, send PDFs to clients, accept payments on your behalf, and sync across your devices.
- Money & fraud: verify identity for payouts, comply with anti-money-laundering rules, and stop account takeovers.
- Improve the product: aggregated, de-identified metrics that tell us which features need work.
- Support: answer your questions when you write to us.
4. Who we share with
We share data with a small number of vetted processors, only to deliver the service:
- Payment partners (Paystack, Flutterwave, Stripe, MTN MoMo) — for payouts and customer payments.
- Cloud hosting (AWS, Frankfurt region) — to store your data.
- Email delivery (Postmark) — to send invoice emails to your clients.
- Crash & analytics (Sentry, PostHog self-hosted) — to debug the app.
We will only disclose data to law enforcement when we receive a valid legal order, and we'll tell you unless the order forbids it.
5. Storage & security
Your data is encrypted in transit (TLS 1.3) and at rest (AES-256). Payouts and identity documents sit in an isolated vault with separate access controls. We run quarterly penetration tests and a public bug bounty.
We keep your data for as long as your account is active, plus 7 years after closure — the retention period required by Ghana Revenue Authority for tax records. You can request earlier deletion of anything that isn't legally required.
6. Your rights
Under Ghana's Data Protection Act (2012) and the GDPR (where it applies to you), you have the right to:
- Access a copy of everything we hold about you.
- Correct anything that's wrong.
- Delete your account and data (except records we must keep by law).
- Export your data in machine-readable CSV/JSON.
- Object to processing that relies on our legitimate interests.
One-tap exports and deletion live in Settings → Privacy. Or write to privacy@invoicex.app and we'll handle it within 30 days.
7. Cookies
On the web app we use strictly-necessary cookies for sign-in and a single first-party analytics cookie (no third-party tracking, no advertising cookies). The mobile apps use the equivalent device identifiers for the same purposes. You can opt out of analytics in Settings → Privacy.
8. Children
InvoiceX is built for businesses and is not directed at anyone under 18. If you believe a minor has signed up, write to us and we'll close the account.
9. Changes to this policy
When we make a material change we'll email account holders at least 30 days before it takes effect, and post a notice in the app. Older versions live in the policy archive.
10. Contact us
Loop Technologies Ltd.
House No. 14, 2nd Cantonments Close
Cantonments, Accra, Ghana
Data Protection Officer: dpo@invoicex.app
General privacy questions: privacy@invoicex.app