Privacy Policy

1. Introduction

Welcome to Quinvy ("we", "our", "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and use our invoicing and subscription management services.

2. Data We Collect

• Identity Data: First name, last name, organization name.
• Contact Data: Email address, telephone numbers, and billing addresses.
• Client Data: Information you input about your clients to generate invoices.
• Financial & Transaction Data: Handled securely via our Merchant of Record, Paddle. We do not store your credit card details.
• Technical & Usage Data: IP address, browser type and version, time zone setting and location, operating system, platform, and details about how you interact with our website (such as clicks, scrolls, heatmaps, and session recordings).

3. How We Use Your Data

We use your personal data to:

• Provide and maintain our invoicing services.
• Manage your account and subscriptions.
• Process your payments securely through our third-party payment processor (Paddle).
• Send you transactional emails (e.g., invoices, OTPs, verification links).
• Improve our website, services, marketing, and customer relationships.

4. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can configure your preferences via our Cookie Consent banner. The categories of cookies we use include:

• Necessary: Required for authentication, security, and basic app functions.
• Analytics: To understand how visitors interact with our platform. We use third-party analytics services, specifically Google Analytics and Microsoft Clarity. These services use cookies to collect technical and usage data, including session recordings and heatmaps, to help us improve user experience.

  You can learn more about how Google uses your data here.
  You can learn more about how Microsoft uses your data here.

• Marketing: To deliver relevant advertisements.
• Preferences: To remember your specific settings and choices.

5. Third-Party Service Providers

We may share your data with selected third parties to facilitate our services:

• Paddle: Acts as our Merchant of Record. They process all subscription payments and handle related billing compliance.
• Cloud Infrastructure: Providers that host our servers and databases securely.
• Email Providers: Services we use to dispatch transactional emails and OTPs securely.
• Analytics Providers: Services like Google Analytics and Microsoft Clarity that assist us in analyzing website traffic and user behavior.

6. Data Security

We prioritize the security of your personal and financial data. All data transmitted between your browser and our servers is encrypted in transit using industry-standard Transport Layer Security (TLS/SSL). Additionally, sensitive information stored in our databases is encrypted at rest to prevent unauthorized access and data breaches.

7. Data Controller vs. Data Processor

For the purpose of compliance with data protection laws (such as GDPR):

• As a Data Controller: We act as a Data Controller for the personal data you provide to create and manage your Quinvy account (e.g., your name, email, billing details).
• As a Data Processor: We act strictly as a Data Processor for the data you input about your own clients (e.g., your clients' names, addresses, and emails on invoices). You are the Data Controller for your clients' data and are responsible for obtaining any necessary consent to process their information using our platform.

8. International Data Transfers

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. By using our service, you consent to this transfer. We ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place to protect your data during international transfers.

9. Your Rights & Data Deletion

Depending on your location (e.g., under GDPR or CCPA), you may have rights regarding your personal data, including the right to access or correct your data. Please note that because our service involves generating and managing financial records (invoices), we are often legally required to retain certain transaction data for tax and accounting compliance.

Currently, we do not support automated account or data deletion directly from the dashboard. If you wish to request the deletion of your account or eligible personal data, please contact us at privacy@quinvy.com. We will process your request in accordance with applicable laws, subject to our legal retention obligations.

10. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at privacy@quinvy.com.