Privacy Policy

1. Information we collect

We collect the following to provide the service:

• Account information — your name, email address, and a securely hashed password when you register.
• Business and invoice data — the business details, clients, invoices, line items, and templates you create in your workspace.
• Email-sending settings — if you choose to send invoices from your own address, the email/SMTP details you provide so we can send on your behalf.
• Usage and device data — basic analytics (such as pages visited) collected via Google Analytics to help us improve the product.
• Cookies — a session cookie required to keep you signed in, and analytics cookies as described below.

2. How we use your information

• To provide and operate Invco — creating, storing, rendering, and sending your invoices.
• To authenticate you and keep your account secure.
• To send you essential account emails (verification codes, password resets, and important service notices).
• To understand how the product is used and improve it.
• To respond to your support requests.

3. How invoice emailing works

When you connect your own email and send an invoice, Invco uses the credentials you provide solely to deliver that email from your address to your recipient. We do not use your connected mailbox for anything other than sending the invoices you ask us to send.

4. AI and the MCP integration

If you connect Invco's built-in MCP server to an AI assistant such as Claude, the assistant can act on your account using a per-user API key that you generate and can revoke at any time. The assistant only performs the actions you request, scoped strictly to your own workspace.

5. Service providers

We rely on a small number of trusted providers to run Invco, including cloud hosting and database infrastructure (for storing your data), our deployment platform, an email delivery provider (for the emails we send), and Google Analytics (for usage analytics). These providers process data only to provide their services to us.

6. Data retention

We keep your data for as long as your account is active. If you delete your account or ask us to delete your data, we remove your personal data and workspace content, except where we are required to keep limited records to comply with legal obligations.

7. Security

Passwords are stored only as salted hashes, never in plain text. Your data is stored on encrypted infrastructure, and each business operates in its own isolated workspace that other users cannot access. No system is perfectly secure, but we work to protect your information using industry-standard practices.

8. Your rights

You can access and update your account information at any time from your settings. You can request a copy of your data or ask us to delete your account and associated data by contacting support@invco.pro. Depending on where you live, you may have additional rights under local data-protection law.

9. Cookies and analytics

Invco uses a strictly necessary session cookie to keep you signed in. We also use Google Analytics, which sets cookies to measure aggregate usage. You can block analytics cookies using your browser settings without affecting your ability to use the core product.

10. Children

Invco is intended for businesses and is not directed to individuals under 18. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you.

12. Contact

If you have any questions about this Privacy Policy or your data, contact us at support@invco.pro.