Privacy Policy

1. Information we collect

When you create an account, we collect your name, email address, and password. When you use Swiftbill to create invoices, we store the invoice data you enter — including client names, addresses, and invoice amounts. We do not collect payment card numbers; payments are handled by Stripe.

We automatically collect limited technical information such as your IP address (hashed for privacy), browser type, and pages visited to improve the service and prevent abuse.

2. How we use your information

• To provide and operate the Swiftbill service
• To process subscription payments via Stripe
• To send transactional emails (account confirmation, password reset)
• To detect and prevent fraud or abuse
• To improve the product through aggregated, anonymised analytics

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Data storage and security

Your data is stored on Supabase (PostgreSQL), hosted on AWS infrastructure in the United States. We use row-level security to ensure you can only access your own data. All data is transmitted over HTTPS/TLS.

Demo usage is tracked using a one-way SHA-256 hash of your IP address. The raw IP address is never stored.

4. Public invoice links

If you choose to generate a shareable link for an invoice, that invoice becomes accessible to anyone who has the link. We use randomly generated tokens (UUIDs) that are not guessable. You can choose not to share the link to keep invoices private.

5. Third-party services

• Supabase — authentication and database
• Stripe — payment processing for Pro and Business plans
• Vercel — hosting and edge delivery

Each of these providers has their own privacy policy and data processing terms.

6. Your rights

You may request deletion of your account and all associated data at any time by emailing us. Upon verified request, we will delete your profile, invoices, and client data within 30 days. Some data may be retained for legal or fraud-prevention purposes.

7. Cookies

Swiftbill uses only essential cookies required for authentication (session tokens). We do not use advertising cookies or third-party tracking pixels.

8. Children

Swiftbill is not directed to children under 13. We do not knowingly collect data from children under 13.

9. Changes to this policy

We may update this policy occasionally. We will notify you of significant changes by email or by a notice in the app. Your continued use after changes take effect constitutes acceptance of the updated policy.

10. Contact

Questions about this policy? Reach us at privacy@swiftbill.dev or through the in-app settings page.