Privacy Policy

This Privacy Policy explains how W3 Applications Inc. ("we", "us") collects, uses, shares and protects information when you use Invoicing 24/7, including our website (invoicing247.com), our web app (admin.invoicing247.com), our iOS and Android apps, and the business websites we host for our users at addresses like yourname.invoicing247.com (together, the "Service").

1. Information we collect

Account information. When you create an account we collect your name, email address and business name. If you sign up with an email address, we store a password in hashed form; we never store it in plain text.

Information from Google or Apple sign-in. If you choose "Continue with Google" or "Continue with Apple", we receive your name, your email address and a unique account identifier from Google or Apple. With Apple, you may choose to share a private relay email address instead of your real one. We do not receive your Google or Apple password, and we do not request access to your contacts, files, calendar or any other data in your Google or Apple account.

Business and invoicing information. Information you enter to run your business, such as your business address, phone number, website, logo, tax settings, bank or PayPal.me details you choose to show on invoices, and the clients, invoices, estimates, projects, time entries and payments you record.

Your clients' information. When you add a client, we store the details you provide, such as their name, email address, phone number and address, so you can send them invoices and estimates.

Subscription information. If you subscribe to a paid plan, payment is handled by Stripe or PayPal (web) or by Apple or Google (in the apps). We receive your subscription status, not your full card number.

Device and usage information. We collect your IP address and basic browser or device information to keep the Service secure and prevent abuse. If you allow notifications, we store a push notification token for your device. Our website uses Google Analytics and Google Ads conversion tracking to understand how visitors find and use the site.

Your business website. If you create a website with Invoicing 24/7, we store the content you add to it, such as your business name, text, services and prices, photos, reviews, opening hours, contact details, address or service area, and social media links. When you publish your website, this content is public on the internet at your website address. Photos you upload or choose for your website are stored in our cloud storage at public web addresses so they can be shown on your website.

AI-written website text. When you ask Invoicing 24/7 to write or rewrite your website text, we send the information needed to do that to our AI provider, Anthropic: your business name, the type of business and description you entered, your city or region, the text you ask us to rewrite, and the names and typical prices of items from your recent invoices. We do not send your clients' names or contact details. Our AI provider processes this information to return the text to us and does not use it to train its models.

Stock photo searches. When you search for stock photos for your website, we send your search words to Pixabay. Photos you choose are copied to our cloud storage.

Visitors to websites we host. When someone sends a request through the contact form on a business website we host, we collect what they enter (their name, email address or phone number, the service they're interested in, and their message) and make it available to that business in the app, with a notification by email or push notification. We do this on behalf of the business that owns the website. We count how many times each website is viewed per day without cookies and without storing information about individual visitors. To prevent spam, we briefly use a visitor's IP address in memory to limit how many requests can be sent, and our hosting provider keeps standard server logs, which include IP addresses and browser information, for a limited time for security and troubleshooting.

2. How we use information

We use information to:

• create and secure your account and sign you in, including with Google or Apple;
• provide the Service: create, store and email your invoices and estimates, and send payment reminders you set up;
• build, host and publish your business website, write website text with AI when you ask us to, and deliver requests that visitors send through your website, along with visit counts;
• send you service emails, such as a welcome email, password resets, notifications when a client views an invoice, and account notices;
• send product news and offers, which you can unsubscribe from at any time;
• process subscriptions and provide customer support;
• prevent fraud and abuse, and comply with the law.

Information received from Google or Apple sign-in is used only to create your account, sign you in, and contact you about your account. If you sign in with Google or Apple using an email address that already has an Invoicing 24/7 account, we link the sign-in to that existing account.

We do not sell your personal information, and we do not use information received from Google or Apple for advertising.

3. Google user data

Invoicing 24/7's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only request your basic profile (name), email address and Google account identifier, and we use them only as described in this policy.

4. How we share information

We share information only with service providers who help us run the Service, and only as needed for them to do so:

• Google Cloud (hosting and file storage) and MongoDB (database);
• Twilio SendGrid (sending emails, including invoices you send to your clients);
• Google Firebase Cloud Messaging (push notifications);
• Stripe, PayPal, Apple, Google and RevenueCat (subscriptions and payments);
• Anthropic (writing website text with AI);
• Pixabay (stock photo search for websites);
• Google Maps (maps shown on business websites, loaded directly by visitors' browsers);
• Google Analytics and Google Ads (website analytics).

When you send an invoice or estimate, the details on it are shared with the client you send it to. When you publish your website, its content is visible to anyone who visits it. We may also disclose information if required by law, to protect our rights or users, or as part of a merger or acquisition, in which case this policy will continue to apply to your information.

Some of these providers are located outside Canada, including in the United States, so your information may be processed there and be subject to local laws.

5. Data retention and deletion

We keep your information for as long as your account is active. You can delete your account at any time from My Account in the app (see how to delete your account), or by emailing privacy@invoicing247.com. When you delete your account, we delete your account, clients, invoices, estimates, projects, your website, the requests sent through it and related data. If you signed in with Apple, we also revoke Invoicing 24/7's access to your Apple ID. You can also remove Invoicing 24/7's access at any time from your Google account (myaccount.google.com/permissions) or your Apple ID settings.

If your Pro subscription ends, your published website stays online for 7 days and is then taken offline. We keep its content so you can publish it again, until you delete it or your account.

We may keep limited records where the law requires it, for example billing records.

6. Security

We protect your information with encryption in transit (HTTPS), hashed passwords, access controls and industry-standard practices. No method of transmission or storage is completely secure, but we work to protect your information and will notify you of a breach as required by law.

7. Cookies and local storage

The web app stores your session in your browser so you stay signed in. Our website and web app use cookies for Google Analytics and Google Ads. Business websites we host do not set cookies; if a website shows a map, the map is loaded from Google Maps, which may set its own cookies under Google's privacy policy. You can block or delete cookies in your browser settings.

8. Your rights and choices

You can view and update most of your information in the app. You can ask us to access, correct or delete your personal information, or withdraw consent to marketing emails, by contacting us below. You can unsubscribe from marketing emails using the link in any of them.

If you sent a request through a business website we host, the business that owns the website decides how to use it. You can ask that business to access or delete your information, or contact us and we will help.

9. Children

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect information from children.

10. Changes to this policy

We may update this policy from time to time. We will post the updated policy on this page with a new "Last updated" date, and notify you of material changes by email or in the app.

11. Contact us

If you have questions or requests about your privacy, contact our Privacy Compliance Officer at privacy@invoicing247.com, or by mail at:
W3 Applications Inc., Attn: Privacy Compliance Officer
2010 Winston Park Dr Suite 200, Oakville ON, L6H 5R7, Canada