Privacy Policy

This Privacy Policy explains how WorkTayo Invoice (“we,” “us”) collects, uses, and protects your information.

1. What We Collect

If you use the Service as a guest (no account):

• Whatever you type into the invoice form (your name, email, client details, line items). This is not saved to our database — it exists only in your browser session and in the PDF you download.

If you create an account:

• Email address and password (handled securely via our authentication provider, Supabase; we never see or store your raw password).
• Optionally, your name and business name.
• Client information you save (name, email, address, currency, invoice prefix).
• Project names/tags you create.
• Invoice data you save (line items, amounts, notes, status).
• If you sign up with Google, basic profile information (name, email) provided by Google.

Payment information:

• If you upgrade to the paid plan, payment is handled entirely by PayPal. We receive confirmation that a payment was completed and a PayPal transaction reference, but we never see or store your card or PayPal login details.

2. How We Use Your Information

• To provide the Service (saving your invoices, clients, and projects; generating PDFs; sending you emails like account verification).
• To process your one-time upgrade payment via PayPal.
• To respond to support requests you send us.

We do not sell your data. We do not use your data for advertising.

3. Who We Share Data With

We use the following third-party services to operate WorkTayo Invoice, each of which processes limited data as needed to provide their service to us:

• Supabase — database hosting, authentication, and email delivery for account verification.
• Vercel — application hosting.
• PayPal — payment processing for the one-time paid upgrade.

We don’t share your data with anyone else except as required by law.

4. Your Client’s Data

When you save a client’s name, email, or address in WorkTayo Invoice, you are the one responsible for having a lawful basis to store and use that person’s information (e.g. because they’re your own client). We store this data on your behalf as part of the Service.

5. Shared Invoice Links

If you generate a shareable invoice link, anyone with that link can view the invoice (your name, your client’s name, and the invoice contents). Don’t share links you don’t want publicly viewable.

6. Data Retention

• Guest-created invoices are never stored by us.
• Registered account data (clients, projects, invoices) is retained until you delete it or delete your account.
• Deleting your account permanently removes your profile, clients, projects, and invoices. This can’t be undone.

7. Your Rights

You can access, edit, or delete most of your data directly within the app (Settings, Clients, Projects, Invoices). You can request a copy of your data or full account deletion by emailing us.

8. Cookies

We use only essential cookies needed to keep you signed in and to operate the Service. We don’t use tracking or advertising cookies.

9. Security

We take reasonable measures to protect your data, including relying on Supabase’s and PayPal’s security practices for authentication and payment processing respectively. No system is 100% secure, and we can’t guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We’ll update the “Last updated” date above when we do.

11. Contact

Questions about this Privacy Policy or your data? Reach us at hello@worktayo.com.