User Agreement and Privacy Policy
Privacy Policy: scope
This Privacy Policy (“Policy”) explains how Invoice Builder (“we”, “us” and “our”) collects, uses and shares information in connection with the Invoice Builder Chrome extension and this website (together, the “Services”).
Invoice Builder is local-first. Your invoices, clients, business details and settings are created and stored in your browser, on your device. We do not receive them.
Before you use or submit any information through the Services, please read this Policy. By using any part of the Services, you understand that your information will be collected, used and disclosed as described here. If you do not agree with this Policy, please do not use the Services.
Our principles
- Privacy policies should be human readable and easy to find.
- Data collection, storage and processing should be as simple as possible, which makes security and consistency easier and the practices easier to understand.
- Data practices should meet the reasonable expectations of users.
Information we handle today
- Data on your device. Invoices, clients, your business profile, invoice defaults, notes and payment instructions, an optional payment QR code, widget settings, cached exchange rates and Restore Cart progress are stored in your browser (IndexedDB and extension storage). We do not receive this data.
- AliExpress cart data. When you ask to create an invoice, the extension reads the items in the AliExpress cart page you have open (names, quantities, prices, variants and links) to fill the invoice. This happens in your browser and the data is not sent to us. Restore Cart opens AliExpress pages and adds items to your cart from your browser, on your instruction.
- Exchange rates. To convert prices, the extension requests rates from open.er-api.com. The request contains only a currency code. As with any web request, that service can see your IP address.
- Feedback. If you submit the feedback or uninstall form on this website, your answers (what happened, a comment, an optional email or Telegram contact, the extension version and your interface language) are sent to Google Forms. If you write to us by email, we receive your message and email address.
- This website. The website is hosted by Vercel, which may process standard technical logs such as your IP address, browser type and the pages you request. We do not run analytics and do not set cookies on this website today.
Information we do not collect today and may collect in the future
We do not currently collect the categories of information listed below. The Services may grow, for example with user accounts, paid plans, donations, a newsletter or website analytics. If we introduce such features, we may collect the following. Before we do, we will update this Policy and its date and, where the law requires, ask for your consent.
- Information you provide directly. We may collect any information you give us, for example when you (a) create an online account, (b) make a donation or purchase, (c) contact us or provide feedback, or (d) subscribe to a newsletter. This may include your name, email address, phone number, mailing address, payment information and geographic location.
- Device and usage information. We may automatically collect (a) device information such as IP addresses, location (by country and city), unique device identifiers, IMEI and TCP/IP address, browser type, browser language, operating system and mobile carrier information, and (b) information about how you interact with the Services, such as referring and exit pages and URLs, platform type, the number of clicks, domain names, landing pages, pages and content viewed and their order, statistical information about use, time spent on particular pages, the date and time of use, frequency of use and error logs.
- Cookies and tracking technologies. We may use Internet server logs and online tracking technologies such as cookies and tracking pixels (also called web beacons or clear GIFs). A cookie is a small text file placed on your device that lets us recognise it, store your preferences and settings, understand which pages you visited and which sites referred you, perform searches and analytics, and assist with security. Tracking pixels are tiny electronic tags that provide usage information and measure the popularity of the Services. In emails we send, we may use such tools to see whether you open a message or click a link.
- Information from third parties. To the extent permitted by law, we may collect information from third parties, including public sources, social media platforms, and marketing and market research firms, such as your name, contact information, demographic information and information about your employer.
How we use information
We use the information described above to:
- provide, maintain and secure the Services, including currency conversion;
- process and respond to your inquiries and feedback, and provide technical and customer support;
- understand how the Services are used, fix problems, and develop new features;
- comply with the law and protect the safety, rights, property or security of Invoice Builder, the Services, our users and the public; and
- enforce this agreement, including by investigating potential violations.
If we introduce the features described in the previous section, we may also use the related information to run accounts, send account alerts and transaction messages, send newsletters you have subscribed to, accept donations or process transactions, and conduct analytics, research and reporting.
We may aggregate or de-identify information and use de-identified or aggregated data for any purpose, including research and marketing. We may combine information we collect from you with information we obtain from affiliates and other third parties, and use it in accordance with this Policy.
When we disclose your information
We do not sell your personal information. We may disclose or share it in the following circumstances:
- Service providers. Third parties that perform services on our behalf, such as website hosting, Google (feedback forms), data storage, data analysis and processing, customer support and legal services.
- Legal compliance and protection. If required by law or on a good-faith belief that disclosure is permitted by this Policy or reasonably necessary to (a) comply with legal process, (b) enforce this agreement and Policy or other contracts with you, (c) respond to your requests for support, or (d) protect the rights, property or personal safety of Invoice Builder, our agents and affiliates, our users and the public. This includes exchanging information with other companies and organisations for fraud protection, and spam and malware prevention.
- Business transfers. If we transfer or sell our assets, your information may be disclosed in connection with that transaction, including in contemplation of it. If our assets are transferred to a third party, customer information would likely be among the transferred assets.
- Affiliated companies. Current or future affiliated companies.
- Consent. Third parties, where you have consented.
- Aggregate or de-identified information. We may disclose de-identified or aggregated data to third parties for any purpose.
Legal basis for processing personal data
Some jurisdictions require us to tell you the legal grounds on which we use or disclose information that can identify you. To the extent those laws apply, our grounds are:
- Contractual commitments. Much of our processing is needed to provide the Services to you.
- Legitimate interests. We process information where it furthers our legitimate interests in ways that are not overridden by your rights and freedoms, such as customer service, protecting our users and property, managing accounts, analysing and improving the Services, managing legal issues and, if introduced, marketing and fundraising. We may also process information for the same legitimate interests of our users and business partners.
- Legal compliance. We may need to use and disclose information to comply with legal obligations.
- Consent. Where required by law, we process information on the basis of consent. You have the right to withdraw consent in accordance with applicable law.
Cookies and online analytics
Today, the extension and this website do not use cookies, tracking pixels or third-party analytics. If we add them, we may use third-party web analytics services such as Google Analytics to collect and analyse the information described above, including IP addresses, and to carry out auditing, research and reporting. To prevent Google Analytics from using your information, you can install the official Google Analytics Opt-out Browser Add-on.
You can change your browser settings to notify you when a cookie is set or updated, or to block cookies altogether. See the “Help” section of your browser for details. Blocking cookies may limit access to some features of the Services.
Affiliate links during cart restore
When you choose Restore Cart, Invoice Builder may use affiliate links while opening AliExpress product pages. The operator of Invoice Builder may receive a commission from an affiliate network for qualifying purchases.
This disclosure does not create a setting or a choice of affiliate programme in the extension. Details of any affiliate programme, eligibility result, or commission amount are not shown in the product interface.
Your choices and rights
- Your local data. In the extension’s Settings you can export all your data, import it on another device, or clear it completely. Uninstalling the extension removes its local data from your browser.
- Email. If we ever send marketing emails, you can unsubscribe at any time using the link in the message or by emailing us.
- Account preferences. If we introduce accounts, you will be able to update your account information and email preferences in your settings.
- Rights in the EEA and other jurisdictions. You may have the right to ask whether we hold information about you, to access it, to have it corrected or deleted where appropriate, to object to or restrict our processing, and to withdraw consent. To exercise these rights, email us with the nature of your request. You may also contact your local supervisory or legal authority, but we encourage you to contact us first so we can resolve your concern directly.
International transfers
We may share your information with trusted service providers or business partners in countries other than your country of residence, in accordance with applicable law. Some of your information may therefore be processed in countries whose privacy laws offer a different level of protection from those of your jurisdiction. By providing information to us you acknowledge such transfer, storage and use.
If we provide information about you to a third-party processor located outside the European Economic Area (“EEA”), we will take appropriate measures to ensure the processor protects your information adequately in accordance with this Policy and applicable data protection laws.
Security
We use technical and organisational measures to protect against loss, misuse and alteration of your information. These safeguards vary with the sensitivity of the information. However, no Internet or electronic transmission is completely secure, and we cannot guarantee that every unauthorised attempt to access, use or disclose your information will be prevented.
Children
The Services are intended for users over the age of 18 and are not directed at children under the age of 13. If we become aware that we have collected personal information from a child under 13 (as defined by the Children’s Online Privacy Protection Act) or personal data from a child under 16 (as defined by the EU GDPR), we will take reasonable steps to delete it as soon as practicable.
Data retention
Data stored on your device stays there until you clear it or uninstall the extension. Other information we hold is kept for as long as necessary for the purposes in this Policy, or as long as we are legally required or permitted to keep it. Information may remain in backup copies for an additional period.
Third-party services and links
The Services work with or link to third-party services, including AliExpress, Google (forms), Vercel and open.er-api.com. If you use them, you may disclose information to those third parties. Their collection, use and disclosure of your information are governed by their own privacy policies, not this Policy, and we are not responsible for their content or practices. Invoice Builder is an independent product and is not affiliated with or endorsed by AliExpress. We encourage you to read the privacy statements of the sites and services you use.
Changes to this document
We may update this Policy as we update and expand the Services. We will post changes on this page and revise the date at the top. If we make material changes, we will provide notice as required by law. We encourage you to check this page periodically.
Contact us
If you have questions about this Policy or our privacy practices, contact us at u3763068757@gmail.com.