Legal

Privacy Policy

This policy explains what information InvoBill processes, why we process it, and the choices available to you.

Last updated: August 15, 2026

Who we are

InvoBill is an accounts-receivable software service operated by 1001655157 Ontario Inc., an Ontario corporation based in Canada. InvoBill acts as the controller of personal information collected through this website and our direct business relationship with you.

Privacy questions can be sent to customerfeedback@invobill.com.

Information we process

Account and company information

  • Name, work email address, encrypted credentials, and assigned user role.
  • Company name, team information, and account configuration.
  • Information you provide when requesting a demo or contacting support.

Invoice and receivables information

  • Invoice identifiers, balances, due dates, payment status, notes, and assignments.
  • Customer names, business contact information, and payment confirmations.
  • Collection activity, task history, and related account context.

Connected service information

If you connect an accounting or email service, we process the information needed to provide that connection. This may include invoice metadata, message participants, subject lines, message content, attachments, and thread metadata.

Technical and usage information

  • IP address, device and browser information, login timestamps, and security events.
  • Feature usage, page interactions, performance information, and error logs.

How we obtain information

We obtain personal information from:

  • You and other authorized users in your organization.
  • Accounting, email, and other services you choose to connect.
  • Demo requests, support conversations, and other direct communications.
  • Security, operational, and website analytics tools used to run the service.

Why we process information

Provide and support the service

We use information to create and secure accounts, connect authorized services, organize receivables work, support users, and deliver requested product functionality. The legal basis is performance of a contract and steps requested before entering a contract.

Operate, secure, and improve InvoBill

We use limited technical and usage information to prevent fraud, investigate security events, troubleshoot errors, understand product performance, and improve the service. The legal basis is our legitimate interests in operating a reliable and secure product.

Communicate with you

We respond to demo requests, service questions, security notices, and account-related communications. Marketing communications are sent only where permitted, and you may opt out of them at any time.

Service providers and integrations

We share information only as needed to operate InvoBill, provide integrations you request, comply with law, or protect the service. Depending on the features you use, providers may include:

  • Vercel for website delivery.
  • PostHog for consented website and product analytics, heatmaps, and session replay.
  • SplitForms for demo-request processing and delivery.
  • Intuit QuickBooks Online for authorized accounting integrations.
  • Google and Microsoft for authorized email or productivity integrations.

Providers are permitted to process information only for the services they supply to us and are subject to contractual and legal safeguards. InvoBill does not sell personal information.

International transfers

InvoBill is based in Canada and uses service providers that may process information in other countries. Where required, we rely on appropriate contractual safeguards, including standard contractual clauses, and supplementary measures provided by our service providers.

Retention

We keep information only for as long as it is needed to provide the service, meet legal obligations, resolve disputes, and maintain security. Typical retention periods are shown below.

CategoryTypical retention
User account dataActive use and up to 12 months after termination
Connected email dataActive use and up to 6 months after account deletion
Invoice and financial metadataActive use and up to 12 months after termination
Security and operational logs12–24 months
Website analytics and replay dataAccording to our configured provider retention period

Security

We use administrative, technical, and organizational safeguards appropriate to the information we process. These include encryption, access controls, role-based permissions, secure infrastructure, monitoring, and incident-response procedures. No system can be guaranteed completely secure, but we continuously work to reduce risk.

Your rights and choices

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate or incomplete information.
  • Request deletion or restriction of processing.
  • Receive certain information in a portable format.
  • Object to certain processing and withdraw consent where processing relies on consent.
  • Opt out of marketing communications.

To make a request, email customerfeedback@invobill.com. We may need to verify your identity before completing a request.

Website technologies

We use essential technologies needed to operate and secure the website. Optional PostHog analytics, heatmaps, web-vitals measurement, and masked session replay load only after you provide consent and that choice has been recorded. Demo-form fields are excluded from replay and are not included in analytics events. No marketing tracker is currently installed. Read our Cookie & Tracking Policy or use the footer controls to update or withdraw your choice at any time.

Children

InvoBill is a business service and is not intended for children under 16. We do not knowingly collect personal information from children.

Changes and contact

We may update this policy as the service or legal requirements change. The date at the top of this page shows the latest revision. For privacy questions or requests, contact customerfeedback@invobill.com.

Privacy controls

Choose optional technologies. Essential cookies stay active.

EssentialRequired for security and core site operation.Always on