Privacy Policy
Last updated: January 2026
1. Introduction
InvoiceRunner ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our invoice automation service.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Name and email address
- Authentication data from third-party providers (Google, Microsoft, Xero)
- Company or business name (optional)
2.2 Email Access
When you connect your email account (Gmail or Microsoft Outlook), we request limited access to:
- Read emails that contain invoice attachments
- Download PDF and image attachments from those emails
- We do NOT read, store, or access any other emails or personal correspondence
2.3 Invoice Data
From invoices you process through our service, we extract:
- Supplier/vendor names and contact information
- Invoice numbers, dates, and due dates
- Line items, amounts, taxes, and totals
- The original invoice files (stored securely)
2.4 Accounting Software Access
When you connect accounting software (Xero, QuickBooks, Zoho Books, FreshBooks, or Sage), we access:
- Your chart of accounts and tax settings
- Supplier/contact lists for matching
- Ability to create draft bills/invoices on your behalf
3. How We Use Your Information
We use the collected information to:
- Provide and maintain our invoice automation service
- Extract data from invoices using AI technology
- Create draft bills in your connected accounting software
- Send you service-related notifications
- Improve our AI extraction accuracy
- Respond to customer support requests
4. Third-Party Services
We integrate with the following third-party services:
Email Providers
- Google (Gmail) - For email access and OAuth authentication
- Microsoft (Outlook) - For email access and OAuth authentication
Accounting Software
- Xero - For creating bills and accessing accounting data
- QuickBooks - For creating bills and accessing accounting data
- Zoho Books - For creating bills and accessing accounting data
- FreshBooks - For creating bills and accessing accounting data
- Sage - For creating bills and accessing accounting data
AI & Infrastructure
- Anthropic (Claude) - For AI-powered invoice data extraction
- Amazon Web Services (AWS) - For secure file storage and email delivery
5. Data Security
We implement industry-standard security measures including:
- Encryption in transit (TLS/SSL) and at rest (AES-256)
- Secure OAuth 2.0 authentication with all providers
- Regular security audits and vulnerability assessments
- Access controls and authentication for all systems
- Secure cloud infrastructure with AWS
6. Data Retention
We retain your invoice data for as long as your account is active. You can request deletion of your data at any time by contacting us. Upon account deletion, we will remove your data within 30 days, except where we are required to retain it for legal or compliance purposes.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Disconnect any linked accounts at any time
- Export your data in a portable format
- Withdraw consent for data processing
8. Cookies
We use essential cookies to maintain your session and preferences. We do not use tracking cookies or share data with advertisers.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us at hi@invoicerunner.app