1. About this policy
This policy explains how Invoice & Quote Tools at invoicesquotetools.com handles information when you browse the site, create an invoice, download a PDF, or send optional feedback. “We” refers to the site operator, whose legal identity and contact details require owner confirmation as noted above.
The current invoice generator works without an account. Account registration, cloud invoice storage, and payment processing are not provided. Upcoming tools shown on the site are not yet available.
2. Invoice data and PDF generation
Details you enter may include business and client names, addresses, contact details, tax identifiers, invoice numbers and dates, line items, amounts, notes, payment instructions, custom fields, and a logo. The editor processes this content in your browser and uses it to create previews and PDF downloads. The current generator does not send invoice content or uploaded logos to an invoice-storage or PDF-generation server.
PDF creation uses a browser-side PDF library and fonts served with this site. Downloaded PDFs and JSON draft backups are separate files under your control. Any files you share with a client or another service are then subject to that recipient’s handling. Feedback and analytics are separate data flows described below.
3. Local drafts and their limitations
The editor automatically saves the current invoice, logo, design settings, and incomplete edits in localStorage for this site in your browser profile. It may migrate a draft from an earlier version and keep additional recovery copies when restoring damaged drafts or resolving changes from another tab. These records have no application-defined expiry.
Local drafts are not an online account, cloud backup, invoice archive, or synchronization service. They are limited to the browser profile and site origin where they were saved. Browser settings, private browsing, storage limits, clearing site data, or device loss can prevent saving or erase drafts. Conflicting tabs can interrupt saving. Keep separate copies of important records.
Drafts are readable browser data; the app does not encrypt them in localStorage or protect them with a user login. People using the same browser profile, browser extensions with sufficient access, and scripts running with access to this site’s storage may be able to read them. Use care on shared devices.
4. How to delete browser data
To remove local drafts and recovery copies, first download anything you need, close all tabs for this site, then open your browser’s settings for site data or website storage. Find invoicesquotetools.com and remove its stored site data. Repeat for other browser profiles, devices, or site origins you have used. Your browser may label this control “Cookies and site data” even though the drafts use localStorage.
Creating a new invoice or resetting the editor replaces the working document; it does not guarantee deletion of recovery copies. Clearing only cookies or browsing history may leave localStorage intact. Clearing site data also does not delete PDFs or JSON backups from your downloads, copies shared with others, or feedback already submitted to us. Delete those files separately where appropriate. Opening the editor again may save a new draft.
5. Optional feedback
If you submit feedback, we receive your experience rating, message, optional email address, the page address, and a submission identifier and timestamp. The page address excludes fragments and arbitrary query parameters; it can retain a public template selection. Invoice content is not automatically attached. Anything you type into the message is submitted, so please leave out client information, payment details, passwords, and other sensitive content.
The feedback backend uses Supabase to store submissions and notification status. Resend is used to email the rating, message, optional email, page address, timestamp, and feedback identifier to the configured site-owner mailbox. The mailbox provider also handles that email. We use feedback to understand problems, improve the tools, and follow up if you provide an address. Providing an email is optional and is not a newsletter signup.
For abuse prevention, the server uses the incoming IP address to create a keyed hash used for form validation and submission quotas. The application stores that hash rather than a raw IP address in feedback records and rate-limit records. Notification attempts, provider message identifiers, and bounded error codes support delivery and troubleshooting. Opening the form requests a short-lived token; this does not submit your message.
6. Usage analytics and cookies
The site integrates Vercel Web Analytics to understand traffic and tool usage. Vercel describes its analytics as using no third-party cookies and deriving a visitor hash from the incoming request. Analytics can include page addresses, referrers, filtered query parameters, event times, approximate location, browser, operating system, and device type. See Vercel’s analytics privacy documentation.
Our custom events measure invoice-generator link clicks, editor openings, template selections, successful PDF downloads, and successful feedback submissions. Event properties are limited to predefined template identifiers and interface sources. They do not contain invoice values, logos, feedback text, or email addresses. Avoid placing personal information in URLs, which may also be processed as part of normal requests.
The current application does not set cookies for accounts, advertising, or draft saving. Draft saving uses localStorage. Browser privacy settings and content blockers may limit analytics. This policy does not treat browsing as consent to future tracking; any changes to tracking technology require a fresh privacy and consent review.
7. Service providers and external links
The deployment configuration targets Vercel for hosting and server functions. Hosting infrastructure receives request information such as IP addresses, requested URLs, timestamps, and browser headers to deliver and protect the service. Actual infrastructure logs, deployment settings, and any additional DNS or proxy provider require owner confirmation.
The implemented service providers are Vercel (hosting and analytics), Supabase (feedback database), and Resend (feedback notification emails), together with the owner’s configured email provider. Feedback delivery depends on these services being configured. The owner must confirm the production providers, mailbox provider, storage regions, and any required international-transfer arrangements before final publication.
We use these integrations to operate the site, measure usage, and handle feedback, rather than to sell invoice content. The current application has no data-sale or advertising-sharing integration. Information may also need to be disclosed where required by law or to address abuse and protect legal rights. Links to outside resources and sharing links take you to services with their own policies; clicking an article-sharing link may send the public article address to the selected service.
8. Retention and security
Browser drafts remain until replaced, removed, or cleared by you or your browser, including any recovery records. The feedback database has no automatic deletion schedule for submissions. Expired rate-limit entries are eligible for cleanup when the notification worker runs; this does not remove the hash kept with a feedback submission.
Owner confirmation required: establish and document retention and deletion procedures for feedback, notification emails, backups, infrastructure logs, and analytics. No fixed retention period is promised here.
The feedback implementation includes server-side validation, signed form tokens, submission limits, and restricted database access. These measures do not guarantee complete security. Do not use browser drafts as your only record or submit unnecessary sensitive information through feedback.
9. Your choices, requests, and contact
You can use the invoice generator without sending feedback or providing an email. You can remove browser drafts as described above. We do not have a cloud copy of your locally saved invoices to retrieve or delete for you.
Depending on where you live and the applicable law, you may have rights to access, correct, delete, or obtain a copy of personal information, restrict or object to processing, withdraw consent where processing depends on it, or complain to a relevant data-protection authority. Requests concerning feedback may require enough information to locate the submission and verify the request without collecting unnecessary information.
Owner confirmation required: add a monitored privacy contact and the operator’s legal identity/location; confirm applicable legal bases, regional rights, and request procedures. Until completed, the Feedback button is an interim way to contact the site. Feedback is optional and may be unavailable, so it must not be the sole final channel for privacy requests.
10. Changes to this policy
We will update this page and its revision date when our information practices change, and provide additional notice or obtain consent where required. New services must be reviewed before they collect information. The Terms and Conditions explain responsibilities when using the tools.