trust

GDPR & your data rights

How InvoyFlow handles personal data for users in the EU, UK, and worldwide.

InvoyFlow processes personal data to provide invoicing services. For EU and UK users, we comply with GDPR principles of lawfulness, purpose limitation, and data minimization.

Lawful bases include contract performance (providing the service you signed up for), legitimate interests (security and product improvement), and consent where required.

You have the right to access, rectify, export, and delete your personal data. Use in-app settings or email support@invoyflow.com for data subject requests.

We use subprocessors (cloud hosting, email, payment processors) under data processing agreements. A list is available on request.

Data is stored in secure cloud infrastructure with encryption in transit and at rest.

Your rights

Access

Request a copy of personal data we hold about you.

Deletion

Delete your account and associated data from settings.

Portability

Export invoices and records in standard formats.

Objection

Object to processing for direct marketing (we do not sell data).