Privacy Policy

Invoice Up is built on a simple principle: collect the least amount of data needed to run the service, and never use it for anything else. No tracking, no advertising cookies, no profiling, no data sold or shared with third parties for marketing.

When you use Invoice Up we store:

• Your Dekimu user ID (issued by id.dekimu.com, the shared Dekimu authentication service)
• Invoice data you enter: debtor email address, amount, due date, and an optional attached file (PDF or image)
• Operational timestamps: when each invoice was created, when it was marked paid, and when follow-up emails were last sent
• Subscription status (active / inactive) — handled by Stripe; we do not store card details

We do not collect your name, postal address, phone number, IP address logs, device fingerprints, or payment card details.

Your data is used exclusively to operate the service: sending automated payment-reminder emails on your behalf, displaying your invoices in the dashboard, and managing your subscription. We never sell, rent, or share your data for advertising or analytics.

Invoice Up is part of the Dekimu ecosystem. With your Dekimu account, aggregate statistics (paid year-to-date, pending, overdue, average days-to-pay) are shared with Dekimu ID so you can see a unified view of your freelance business across Dekimu apps. Only aggregate numbers are shared — never invoice contents, debtor emails, or attachments.

Paid invoices are automatically deleted 2 years after being marked paid. Pending invoices are kept until you mark them paid or delete them. If you delete your Invoice Up data from the dashboard, it is erased immediately. Deleting your Dekimu account removes everything across all Dekimu apps.

Files you upload are stored by our hosting provider at non-public, non-guessable URLs and are linked in the reminder emails you send. In the dashboard, files are served only through our authenticated proxy. Files are deleted when their invoice is deleted.

Invoice Up does not use tracking, analytics, or advertising cookies. A single strictly-necessary session cookie is set after sign-in to keep you logged in. No third-party cookies are set by us.

You have the right to access, correct, export, or erase your personal data at any time. To delete all your Invoice Up data instantly, use the Delete account option in your dashboard. For access or portability requests, use the Contact options in Dekimu ID. You also have the right to lodge a complaint with a supervisory authority.

• Dekimu ID — authentication and shared account (id.dekimu.com, operated by Dekimu)
• Upstash — encrypted data storage for invoices and account settings
• Vercel — hosting and file storage
• Resend — sending of reminder emails
• Stripe — payment processing for the subscription

Each processor handles data under its own GDPR-compliant agreement. We select providers that meet EU data-protection standards.

Data is transmitted over HTTPS. Authentication uses short-lived signed tokens verified on every request. Passwords are never stored by Invoice Up — authentication is delegated to Dekimu ID, which hashes passwords using industry-standard methods.

If we make material changes, we will update the "Last updated" date at the top of this page and, when relevant, notify you by email before the changes take effect.

Dekimu Labs S.L. (CIF B55431357) · legal@dekimu.com. You may also use the Contact options in Dekimu ID at id.dekimu.com.

This policy is governed by the laws of Spain. You may lodge a complaint with the Agencia Española de Protección de Datos (AEPD) or the supervisory authority of your habitual residence.