Privacy Policy
Who we are
Invoice Mitra (“we”, “us”) provides invoicing, reminders, and payments tooling for freelancers and agencies. This policy explains what personal data we process, why we process it, and the choices available to you.
Data we collect
- Account data: email address, profile metadata from Supabase Auth, workspace identifiers.
- Billing data: subscription status, invoices we issue to you as the SaaS vendor.
- Financial workflow data: customer records you upload, invoice line items, reminder schedules, Razorpay payment references.
- Technical data: browser type, device fingerprints, IP addresses, cookies necessary for sessions.
- Support communications: messages submitted via forms or in-app tickets.
Payments & Razorpay
Payment instruments are captured directly by Razorpay. We receive tokens, charge statuses, and reconciliation payloads — never full card numbers. Razorpay processes subject to its own privacy commitments; review their documentation when enabling live keys.
Cookies & analytics
We issue strictly necessary cookies for authentication and CSRF-safe flows. Optional analytics or marketing pixels will honor consent banners when activated — see the Cookie Policy for granular categories.
Third-party processors
Infrastructure may include Supabase (database + auth), Vercel or comparable hosts, Resend or Postmark for email delivery, Razorpay for payments, and future observability vendors such as Sentry. Each subprocessors executes agreements requiring confidentiality and security controls.
Legal bases & retention
We process data to perform contracts with you, comply with law (tax, AML where applicable), and pursue legitimate interests such as fraud prevention. Retention follows operational necessity — invoices may persist for statutory periods even after account closure.
Your rights
Depending on jurisdiction you may request access, correction, deletion, portability, or restriction. Contact support@mail.invoicemitra.online to exercise rights; we verify ownership before fulfilling sensitive requests.
International transfers
Hosting regions follow Supabase project configuration. Where transfers cross borders we rely on standardized contractual clauses or adequacy decisions.
Contact
Questions about privacy should route through the contact page.