Privacy Policy

1. Who we are

EazInvoice provides invoicing, purchase and work order, payment tracking, reporting, compliance, subscription, team, and optional AI-assisted business tools. In this policy, “EazInvoice”, “we”, “our”, and “us” refer to the EazInvoice service operated through eazinvoice.com.

2. Information we handle

Depending on the features you use, we may process:

• Account and contact information: name, email address, mobile number, password authentication data, account type, and profile preferences.
• Business and compliance information: business name, address, state, GSTIN, PAN, bank or UPI details, financial year, logo, and documents you choose to provide.
• Business records: customer and vendor details, items and services, invoices, quotations, purchase or work orders, payments, expenses, reports, notes, and supporting records.
• Subscription and transaction information: plan, billing status, payment references, gateway status, and related audit events. Complete payment-card credentials are handled by the payment provider and are not stored by EazInvoice.
• Technical and security information: device and browser information, IP address where available, session and authentication events, error logs, API-key events, and workspace audit records.
• AI feature information: prompts, selected business context, generated drafts, outputs, and usage counters when an AI feature is used.

3. How we use information

• Provide, secure, maintain, and improve EazInvoice features.
• Authenticate users, send email OTPs, and prevent unauthorized access.
• Create and retain business documents, calculate totals and taxes, and prepare reports.
• Process subscriptions and confirm payment or gateway events.
• Send documents and business notifications when you request them.
• Provide support, investigate errors, enforce plan limits, and maintain audit trails.
• Meet applicable legal, tax, accounting, fraud-prevention, and regulatory obligations.

We do not sell personal information. We do not use customer or vendor records for unrelated advertising.

4. Sharing and service providers

We share information only when needed to operate a requested feature, comply with law, protect the service, or follow your direction. Providers may include hosting and database services, Supabase authentication and email OTP, SMTP email providers, Razorpay for payments, Google authentication where enabled, AI service providers for paid AI features, and communication services selected by the user.

When you email, download, print, share, or send a document, the recipient and delivery service receive the information that you chose to include. Business-tier organizations may also configure their own SMTP and gateway credentials; those integrations are controlled by the workspace owner.

5. Security, storage, and retention

We use HTTPS, authentication, role and workspace access controls, restricted secrets, audit records, and operational safeguards intended to protect information. No online service can promise absolute security, so users should also protect passwords, OTPs, devices, and API keys.

We retain information while an account is active and as reasonably needed to provide the service, resolve disputes, maintain security, and meet legal or financial recordkeeping requirements. Backup, audit, tax, or transaction records may be retained for a legally required period after account closure.

6. International processing and children

Some providers may process information outside the user’s state or country under their contractual and security safeguards. EazInvoice is a business service and is not directed to children under 18.

7. Your choices and rights

You can review and update much of your information from your profile and business settings. You may request access, correction, export, or deletion of personal information by contacting us. We may need to verify the request and may retain information required by law or legitimate security and accounting needs.

You can stop optional emails through the relevant workspace setting. Essential authentication, security, billing, and service messages may still be sent while the account remains active.

8. Account deletion requests

EazInvoice users may request deletion of their user account and associated personal access data by emailing support@eazinvoice.com from the registered email address with the subject “EazInvoice account deletion request”.

Account deletion removes or disables personal access where legally possible. Business financial records, invoices, journals, tax records, audit logs, and security records may need to be retained for legal, accounting, fraud-prevention, dispute-resolution, or regulatory reasons. We will explain any retention limits during the request process.

9. Changes to this policy

We may update this policy as EazInvoice develops or legal requirements change. The effective date above will be revised, and material changes may also be communicated in the application or by email.