Privacy Policy

1. What We Collect

When you create an account, we collect your email address and authentication credentials (managed by Firebase Authentication). When you upload invoices, we extract text data including vendor names, invoice numbers, dates, and amounts. We also collect basic usage analytics (upload counts, duplicate detection results) to power your dashboard.

2. How We Process Your Files

PDF files are processed entirely in memory on our servers. We extract text content, parse invoice fields, and run duplicate detection. We do not store your original PDF files. Once processing is complete, the file data is discarded. Only the extracted metadata (vendor, amount, date, invoice number) and duplicate detection results are persisted.

3. How We Use Your Data

• To provide duplicate invoice detection and analytics
• To manage your account, workspaces, and team members
• To send transactional emails (workspace invitations, accept confirmations)
• To enforce plan quotas and billing

4. Data Storage & Security

Your extracted invoice data is stored in Google Cloud Firestore, isolated by user and workspace. All data is encrypted in transit (TLS) and at rest. Authentication is handled by Firebase Authentication. We do not sell, share, or provide your data to third parties for marketing purposes.

5. Payment Processing

Payments are processed by Stripe. We do not store your credit card information. Stripe's privacy policy governs how your payment data is handled. We only store your Stripe customer ID and subscription status.

6. Cookies & Tracking

We use localStorage to persist your theme preference and workspace selection. We do not use third-party tracking cookies. Firebase may set cookies for authentication session management.

7. Data Retention & Deletion

All invoice metadata is automatically deleted after 365 days by default. Workspace administrators may shorten this retention period (minimum 1 day) from the workspace settings. Invoices approaching the retention limit are marked for deletion with a 7-day grace period before permanent removal.

You can also delete individual invoices, buckets, or your entire workspace at any time. Deleting a workspace permanently removes all associated data (invoices, analytics, team members). To delete your account entirely, contact us at the email below.

8. Your Rights

You have the right to access, correct, or delete your personal data. You can export your invoice data as CSV from the dashboard at any time. For data access or deletion requests, contact us.

9. Contact

For privacy-related questions, contact us at privacy@dupeinvoice.com.