Privacy Policy

InvoiceFast ("we", "us", or "our") operates an online invoice generator. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and your rights under the Protection of Personal Information Act (POPIA) and applicable data protection laws.

What data we collect

We may collect the following categories of personal information:

• Account information — such as your email address and authentication identifiers when you sign in via our identity provider.
• Invoice data — information you enter to create invoices, including business name, client name, client email, invoice numbers, dates, line items, notes, and optional logo images.
• Usage data — such as the number of invoices you generate and subscription status, to enforce free-tier limits and provide paid features.
• Payment-related metadata — subscription status from our payment processor (we do not store full payment card details).

Why we collect your data

We process your personal information to:

• Provide, operate, and improve the invoice generation service;
• Authenticate your account and secure access to your data;
• Generate and deliver PDF invoices and (for Pro users) send invoices by email;
• Manage subscriptions, billing, and customer support;
• Comply with legal obligations and prevent abuse of the service.

We process data based on your consent, contractual necessity to deliver the service, and our legitimate interests in operating a secure and reliable platform.

We do not sell your data

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We share data only with trusted service providers who help us run InvoiceFast (such as hosting, authentication, email delivery, and payment processing), and only to the extent necessary for them to perform those services on our behalf under appropriate confidentiality and security obligations.

How long we keep your data

We retain account and invoice-related data for as long as your account is active or as needed to provide the service. You may request deletion sooner (see below). We may retain limited records where required by law or for legitimate business purposes such as fraud prevention.

Your rights and data deletion

Under POPIA, you have the right to access, correct, delete, or object to the processing of your personal information, and to lodge a complaint with the Information Regulator of South Africa.

To request access, correction, or deletion of your personal data, email us at support@aurastudioza.com. We will respond within a reasonable period and no later than required by applicable law. Deletion requests may result in closure of your account and removal of associated invoice data, subject to any legal retention requirements.

Security

We implement appropriate technical and organisational measures to protect your information against unauthorised access, loss, or misuse. No method of transmission over the internet is completely secure; we encourage you to use a strong password and protect your account credentials.

POPIA compliance

We are committed to complying with the Protection of Personal Information Act, 2013 (POPIA). We collect personal information for specific, explicitly defined purposes; limit processing to what is adequate and relevant; and apply reasonable security safeguards. Where required, we will obtain your consent before processing sensitive personal information.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of the service after changes constitutes acceptance of the revised policy.

Contact

For privacy-related questions, data access, correction, or deletion requests under POPIA, email support@aurastudioza.com with the subject line "Privacy request" and the email address linked to your account.