Privacy Policy
Last updated: 6 April 2026
This Privacy Policy explains how Invoxa Ltd (“Invoxa”, “we”) processes personal data when you use our website and Services. For legal correspondence, contact hello@invoxa.io.
1. Data controller
Invoxa Ltd, registered in England and Wales, is the controller of personal data described here. We operate invoicing and customer messaging services for businesses.
2. Data we process
We may process: account details (name, email, company); billing data; invoice and payment metadata you submit; technical logs (IP, device, timestamps); and content of messages sent through the Services (e.g. invoice notifications) as needed to deliver the product.
3. Purposes and legal bases
We process data to provide the Services, manage accounts, take payments, ensure security, comply with law, and improve reliability. Legal bases under UK GDPR / GDPR may include contract, legitimate interests (e.g. fraud prevention, service analytics), and consent where required.
4. Email and SMS
When you send invoices or reminders via email or SMS, we process recipients’ contact details on your instructions as a processor or joint arrangement depending on context. You are responsible for having a valid legal basis to contact your customers and for accurate message content.
5. Processors and transfers
We use vetted infrastructure and service providers (hosting, payments, messaging). Where data is transferred outside the UK/EEA, we use appropriate safeguards such as standard contractual clauses where required.
6. Retention
We retain data only as long as needed for the purposes above, including legal, tax, and dispute resolution requirements, unless a longer period is required by law.
7. Your rights
Depending on your location, you may have rights to access, rectify, erase, restrict, or object to processing, and to data portability. You may lodge a complaint with a supervisory authority. To exercise rights, contact hello@invoxa.io.
9. Children
Our Services are not directed at children. We do not knowingly collect personal data from children.
10. Updates
We may update this policy and will revise the date above. Material changes may be communicated by email or in-product notice where appropriate.