Legal / Privacy

Privacy Policy

Last updated: April 23, 2026

We collect the minimum needed to run Invora: your account email, name (if provided), invoices you create, client records you save, brand assets you upload, and metadata about credit purchases (bundle, amount, timestamp). We never store full payment card details — those are handled by Stripe.

Your data is stored on Lovable Cloud, our managed backend infrastructure. It's encrypted at rest and in transit. Payment processing is handled by Stripe; their privacy policy applies to anything you submit through their checkout.

We use functional cookies for sign-in and session state. We do not use advertising or third-party tracking cookies.

You can:

• Export your invoices and clients at any time from the app.
• Update or correct your account info from Settings.
• Request full deletion of your account and data.
• Ask what data we hold about you.

To request deletion, email support@getinvora.com from the address linked to your account. We complete deletion requests within 30 days. Some records (e.g. tax-relevant payment receipts) may be retained for legal compliance after account deletion.

We don't sell your data. We share data only with the providers that make Invora work: Lovable Cloud (hosting & database), Stripe (payments), and our email delivery provider (transactional emails).

Questions about privacy? Email support@getinvora.com or message us through the support page.