Privacy Policy for invoicein30

PRIVACY POLICY Last Updated: January 27, 2026

1. WHO WE ARE This Service (invoicein30.com) is operated by Reinards Jānis Saulītis, a self-employed individual registered in Latvia ("we", "us"). For the purposes of the GDPR, we are the Data Controller of your account data, and a Data Processor for the client data you enter into invoices.

2. DATA WE COLLECT

Account Data: Name, email address, and profile picture (if using Google Login).

Billing Data: We do not store credit card numbers. All payments are processed by Polar.sh, our Merchant of Record.

Usage Data: Device type, browser, location (country/city), and interaction logs via Umami Analytics.

User Content: Business details, logos, and the Third-Party Data (your clients' names/addresses) you input to generate invoices.

3. HOW WE USE YOUR DATA We use your data solely to:

Provide and maintain the Service.

Authenticate your login (via Google/Supabase).

Process transactions (via Polar.sh).

Analyze Service performance (via Umami).

4. THIRD-PARTY SUB-PROCESSORS We do not sell your personal data to advertisers or data brokers. We share data strictly with the following trusted third-party service providers (Sub-Processors) solely to operate the Service’s infrastructure. By using the Service, you authorize us to share data with:

Supabase (Database & Authentication): Used to store your user account data, settings, and invoice contents securely. (Location: Global/US).

Polar.sh (Merchant of Record): Used to process all payments, handle tax compliance, and manage subscriptions. We do not store your financial data; Polar.sh handles it directly. (Location: US).

Vercel (Hosting & Deployment): Used to host the website and deliver content via a global Content Delivery Network (CDN). (Location: Global).

Google (OAuth): Used only if you choose to sign up/login via your Google account. (Location: US).

Umami (Analytics): Used for privacy-friendly, anonymous website traffic analysis to help us improve the Service. (Location: EU).

5. INTERNATIONAL DATA TRANSFERS Your information, including Personal Data, may be transferred to—and maintained on—computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ (e.g., the United States). By using the Service, you consent to this transfer. We rely on Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs) with our sub-processors to ensure GDPR compliance.

6. YOUR RIGHTS (GDPR) If you are in the European Economic Area (EEA), you have the right to:

Access / Rectify: View or correct your data within the app settings.

Delete ("Right to be Forgotten"): You may request full deletion of your account and data by contacting support@reinards.lv. Note that if your account is deleted, all stored invoices will be permanently lost.

Export: Request a copy of your personal data.

7. COOKIES & TRACKING We use essential cookies (for login sessions via Supabase/Google) and privacy-focused analytics (Umami). We do not use third-party advertising cookies or sell your browsing history.

8. SECURITY We use industry-standard SSL encryption and rely on the security infrastructure of Supabase and Vercel. However, no method of transmission over the Internet is 100% secure.

9. CONTACT For privacy concerns, contact the Data Controller: Reinards Jānis Saulītis Email: support@reinards.lv