Privacy Policy

When an employer uses payroll, we store employee contact and employment details, pay rates, tax and super settings, pay records, leave, timesheets, expenses and payroll audit history to provide that service.

• Employers must have a lawful reason to provide employee data and explain its use to their employees
• Only the business owner and the employee linked through a confirmed email can access that employee’s payslips; invoice team access does not include payroll
• Employer and employee bank details used for optional ABA exports are encrypted before storage and are not included in notification emails
• Resend processes invitation and payslip notification emails; payslip amounts are accessed through the authenticated portal
• Stripe receives the payroll subscription and a count of employees recorded as paid, not their names or pay amounts
• Do not enter TFNs, medical details or identity documents into payroll text fields
• Cancelling payroll does not delete employment records. Contact support for access, correction, retention or account closure requests

Where the integration is enabled, you can authorize a Daylane Business to create and send its Job invoices through your Free Invoice App account.

• You sign in and approve the named Daylane Business before access is granted
• Reviewed Customer details, work descriptions, dates and amounts are transferred to create invoice drafts
• Daylane can read those invoices and their status and send them after an explicit user confirmation; other invoices and account settings are not shared
• Disconnect in either app to revoke future access. Invoices already created remain in your Free Invoice App account

We collect the information you enter, upload, or generate when you use Free Invoice App. This includes information about you, your business, and the people or businesses you invoice.

• Your name, email address, password credentials, business details, ABN, and logo
• Client details, invoices, quotes, expenses, line items, payment records, and uploaded attachments
• Team member details, email and SMS preferences, and support messages
• Plan status and identifiers used to manage subscriptions and connected payments
• IP address, browser and device details, pages used, and security logs

We use this information to run the service, deliver the features you choose, protect accounts, and improve reliability. We do not sell personal information.

• Create, store, send, and track invoices, quotes, reminders, statements, and receipts
• Process subscriptions, connected card payments, and plan limits
• Send service messages and respond to support requests
• Detect abuse, investigate problems, and understand how the service performs

We use specialist providers to operate Free Invoice App. They process only the information needed to provide their part of the service and apply their own privacy and security terms.

• Supabase provides account authentication, databases, and private file storage
• Vercel hosts the application and processes technical request logs
• Resend delivers invoice and service emails, and Twilio delivers optional SMS messages
• Stripe processes subscriptions and connected card payments. We do not store full card details; encrypted bank details for optional payroll exports are described above
• Google Analytics and Google Tag Manager measure website use. We do not load them in the Android app

If you choose receipt scanning, the receipt image is sent to Anthropic so its Claude model can read fields such as the supplier, date, total, and GST. You can enter expenses by hand instead.

• We use the result to prefill an expense for you to review
• The original receipt can be stored in your private account storage
• Do not upload sensitive material that is not needed for the expense record

You are responsible for the client and recipient information you enter. We use it to provide the invoicing features you request, including sending emails, SMS messages, PDFs, reminders, statements, and payment links.

• Only enter details you have a lawful reason to use
• Tell recipients how you handle their information where required
• Check invoice and contact details before sending them

We use HTTPS in transit, account authentication, access controls, and private storage rules to protect information. No online service can promise absolute security.

• We keep account data while your account is active and as needed to provide the service
• You can request deletion using our account deletion page
• We may keep limited financial, transaction, fraud-prevention, or security records where law or a legitimate need requires it
• We delete or de-identify retained information when the relevant period ends

You can update most account and business information in Settings. You can also ask us for access, correction, or deletion, subject to any legal limits that apply.

• Change your profile, business details, and communication preferences
• Export invoices and other records available in your account
• Request account deletion at any time
• Contact us if you have a privacy question or complaint

Use the account deletion request page to ask us to delete your account and associated data.

If you have any privacy questions, email us at hello@blumint.com.au.