How we handle your data.

When you use the free generator (no account needed): the invoice details you enter — business and customer names, contact details, addresses, line items, totals and currency — are sent to our servers to render your PDF, and we may keep a record of these details for bookkeeping, statistics and product improvement. An uploaded logo is used only to render your PDF and is deleted from our servers immediately after generation.

If you create an account: we store your account details from our sign-in service (email, username, name, and optionally a phone number and avatar), your company profile, your clients’ details, and the invoices you save — because that is what the app does.

If you contact us: we store the feedback or messages you send through the contact form and receive them by email.

• We do not collect credit card numbers or banking credentials.
• No analytics or advertising scripts — no Google Analytics, no tracking pixels, no fingerprinting.
• No selling, renting or trading of your data — to anyone, ever.

• To generate and return your invoice PDF.
• To run your account: saved invoices, clients and company profile.
• To keep internal records and usage statistics that help us improve the product.
• To keep the platform secure and reliable.

Your invoice content is never used for advertising and never shared with third parties except in the limited cases listed in section 07.

Our servers are hosted with DigitalOcean. All traffic between your browser and Rabbit Invoice is encrypted with HTTPS, and stored data is protected using industry-standard security practices with access restricted to the people who operate the service.

When Rabbit Invoice sends email — for example an invoice you email to a customer from your account, or a reply to your feedback — the message is delivered through Google’s Gmail service. Google processes those messages as our email provider; we don’t give it access to anything else.

For every visitor: your language choice is kept in your browser’s session storage so the site stays in your language.

If you sign in: we keep your session tokens and basic profile information in your browser’s local storage, and our sign-in service at auth.rabbitinvoice.com sets cookies — strictly to keep you signed in. There are no advertising cookies and nothing that tracks you across other websites.

You can clear your browser storage at any time; the only effect is that you are signed out and the language resets.

The complete list of outside services involved in running Rabbit Invoice:

• DigitalOcean — hosts our servers and database.
• Google (Gmail) — delivers the emails we send, as described in section 05.
• Google Fonts — our pages load two typefaces from Google’s font servers; like any web request, this reveals your IP address to Google.

Sign-in (auth.rabbitinvoice.com) is run by us, not a third party. Beyond the list above, we disclose data only if required by law, subpoena or legal process, or to detect and prevent fraud or technical abuse.

Account data is kept for as long as your account is active. Records from the free generator may be kept for internal statistics and product improvement, or aggregated into non-identifiable numbers over time.

You can ask us to delete your account or any data that identifies you at any time (see section 09), and we will remove it from active use.

Depending on where you live (for example, under the GDPR in Europe), you have the right to:

• Ask what data we hold about you and receive a copy.
• Have inaccurate data corrected.
• Have your data deleted.
• Withdraw consent where processing is based on it.

To exercise any of these rights, email contact@rabbitinvoice.com. We respond to every request.

As the platform evolves we may update this policy; changes are posted on this page with a new effective date at the top. Questions about this policy or your data: support@rabbitinvoice.com.