Privacy policy

InvoiceTurtle is a service for sending invoices and quotes in your own branding. Questions about your data can be sent through our contact form.

Waitlist. When you sign up, we store your email address and whatever else you fill in: name, company, number of transactions per month and your comments. We only use this to invite you.

Contact form. Your name, email address and message, to answer your question.

InvoiceTurtle users. Your login details (email address, encrypted password, two-factor authentication), your company details and the invoices, quotes and clients you enter yourself. You are responsible for the data of your clients; we only process it on your behalf, to create and send your invoices and process payments.

Security. To prevent abuse of forms and login attempts, we keep your IP address for no more than 24 hours. Our hosting provider also keeps technical logs for a short time to keep the service secure and running.

For the waitlist and the contact form we rely on your consent: you enter the data yourself and can always have it deleted. For users, we process data to perform the agreement. The security measures fall under our legitimate interest in protecting the service.

Waitlist data is kept until you have received an invite, and for no more than two years. Contact messages are kept for no more than one year. User data is kept for as long as your account exists; after you cancel we delete it, unless a statutory retention obligation applies. IP addresses for security are kept for no more than 24 hours.

We never sell anything. We work with a few carefully chosen service providers:

• Cloudflare for hosting and file storage;
• Neon for the database;
• Resend for sending email;
• Stripe for online payments.

Some of these providers are based in the United States. Data is only transferred with appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

This website does not set any cookies. In the app we only use a functional cookie that keeps you logged in. We use no analytics, advertising or tracking cookies.

You may access, correct or delete your data, and you can object to its use or withdraw your consent. You can also ask to receive your data in a usable file. Send your request through the contact form; we respond within one month.

If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

We update this privacy policy when our service changes. The date at the top shows when that last happened.