Legal

Cookie & Tracking Policy

This policy explains the technologies used on the InvoBill website and how you control anything optional.

Last updated: September 9, 2026

Our approach

InvoBill uses a limited set of website technologies to operate and protect this site. Google Tag Manager loads as our tag container with optional Consent Mode storage denied by default. Optional analytics and marketing tags stay off until the corresponding choice has been recorded.

InvoBill does not sell personal information. You can review or change your choices at any time using the control in the footer.

Information involved

When you visit the website, the technologies described here may process:

A canonical page route and fixed InvoBill page location.
Coarse acquisition categories such as direct, search, email, or referral.
A limited set of named page and demo-form interactions.
After analytics consent, Clarity's visited URL and technical, page, session, and interaction data used to produce heatmaps and recordings.
Routine security, delivery, and error logs generated by our infrastructure.
Your cookie preference choices and the version of the notice you accepted.

We do not use the consent system to store your IP address, email address, user-agent string, form content, or a device fingerprint.

Technology categories

Essential technologies — always active

Essential technologies support website delivery, security, error prevention, and the storage of your privacy choices. They cannot be disabled through our preference tool because the site and the consent controls rely on them.

The demo page loads Apollo's form technology to display and protect the request form. Apollo may process routine technical data needed to operate that form. Information entered into the form may be sent to Apollo as you interact with and submit it, and is handled as described in our Privacy Policy; form values are not sent in Google Analytics 4 event fields. In Clarity recordings, the page and form are marked for masking, so form values are masked before upload.

Analytics — optional

Google Analytics 4 and Microsoft Clarity run only after analytics consent has been recorded. For GA4, the closed contract covers only the route, acquisition, and demo-form fields InvoBill supplies. Those analytics events use a canonical page route, fixed page location, blank referrer, coarse acquisition categories, and a closed set of event properties. We do not deliberately supply form values, raw query strings, raw referrers, or raw campaign parameters.

After analytics consent, GA4 may also create standard events such as first_visit, session_start, and user_engagement and collect ordinary technical and session metadata, including language, page title, screen resolution, pseudonymous client and session identifiers, browser and device characteristics, and approximate geography. Those fields are generated by GA4 rather than supplied through InvoBill's data layer.

Microsoft Clarity provides heatmaps and strictly masked session recordings after analytics consent. We configure Strict masking and mark the page body and demo-request form for masking, so page content and form values are masked before upload. Clarity still collects the visited URL and technical, page, and interaction data needed for heatmaps and playback. The GA4 closed-field contract does not apply to Clarity. We do not send identity calls or custom event properties to Clarity; only approved event names are sent.

Marketing — optional

Any browser marketing tag configured through Google Tag Manager may run only when marketing consent is recorded and the do-not-sell-or-share choice remains off. This policy does not claim that a particular advertising vendor is active. Clarity's advertising storage remains denied regardless of your marketing choice. The browser marketing choice does not subscribe you to marketing emails.

When JavaScript is disabled

The standard Google Tag Manager noscript request may contact Google when JavaScript is disabled. Our tag-manager workspace must contain no noscript-capable marketing tags, including Custom Image tags, so that fallback cannot be used to run marketing tracking.

Your choices

Essential only keeps analytics and marketing technologies off.
Customize lets you choose analytics, marketing, and the do-not-sell-or-share preference independently.
Accept all permits optional analytics and allows browser marketing tags only while the do-not-sell-or-share choice remains off. It does not subscribe you to marketing emails.

To withdraw or update consent, use . Your revised choice applies as soon as it has been recorded successfully. Withdrawing marketing permission blocks marketing events, clears site-owned advertising cookies and browser storage, and refreshes open website tabs; a refresh may clear unfinished forms. Updating analytics alone does not refresh the page. Withdrawal stops future optional collection in this browser, but it does not delete information already processed by an analytics provider.

Consent records

When you save a choice, our consent service records a pseudonymous browser ID, analytics and marketing choices, your do-not-sell-or-share choice, the policy version, and server-generated creation and expiry times. Every update creates a new receipt so we can demonstrate what choice was made and when.

Consent receipts are retained for 12 months and then deleted. Your browser also stores the latest successful receipt so the website can remember and apply your preferences.

Do not sell or share

InvoBill does not currently sell personal information. You may still record an explicit do-not-sell-or-share choice through the control. Turning it on also keeps the optional marketing category off.

Changes and contact

We may update this policy when our website technologies or legal requirements change. The date at the top shows the latest revision. A new policy version will prompt you to make a fresh choice before optional tracking is enabled.

For questions about website technologies or privacy choices, email customerfeedback@invobill.com.