Effective Date: July 17, 2025
1. Introduction
This Privacy Policy describes how Invoicefy (the "Service"), accessible at invoicefyapp.com, collects, uses, discloses, and protects your personal information. Invoicefy is a DBA of Cacele Digital LLC, a Florida Limited Liability Company located in Jacksonville, FL ("we," "us," "our," or "Company"). The Service offers comprehensive tools for creating, sending, and managing proposals, invoices, and payments, designed to assist businesses in streamlining their billing and financial operations.
We are committed to safeguarding your privacy and ensuring the security of your data. By accessing or using the Service, you consent to the practices outlined in this Privacy Policy. If you do not agree with these practices, please do not access or use the Service. This Policy applies to all users of the Service, including visitors, registered users, and clients.
We comply with applicable data protection laws, including but not limited to the General Data Protection Regulation (GDPR) for users in the European Union, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) for California residents, and other relevant U.S. state privacy laws. This Policy is incorporated into our Terms of Service, and any capitalized terms not defined herein shall have the meanings ascribed to them in the Terms of Service.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We encourage you to review this Policy periodically for any updates.
2. Mobile Numbers & SMS Consent
When you opt in to receive SMS text messages from Invoicefy, we use your phone number solely to deliver those notifications. We do not share, sell, or rent your mobile number or personal information with third parties for marketing purposes.
If you use Invoicefy's SMS tools to communicate with your clients, you are responsible for ensuring their consent and managing their privacy according to your own business practices. We do not monitor or control the content or recipient lists for user-initiated SMS messages.
3. Information We Collect
To provide and improve the Service, we collect various types of information from and about you. This collection occurs when you interact with the Service, create an account, use our features, or communicate with us. The types of information we collect include:
Personal Information: This includes data that can identify you as an individual, such as your full name, email address, phone number, billing address, and payment information (e.g., credit card details, which are processed securely through third-party payment processors like Stripe). We do not store complete credit card numbers on our servers.
Business and Financial Data: Information you provide or generate through the Service, such as invoice details, proposal content, client contact information, payment histories, and transaction records. This may include sensitive business data necessary for invoicing and payment processing.
Usage and Device Information: Automatically collected data about your interactions with the Service, including your IP address, browser type and version, operating system, device identifiers, pages viewed, time and date of access, referral sources, and session duration. This helps us understand how the Service is used and improve its functionality.
Cookies and Similar Technologies: We use cookies, web beacons, pixel tags, and other tracking technologies to enhance user experience, remember preferences, and analyze trends. Cookies may be session-based (temporary) or persistent (stored on your device). You can control cookie settings through your browser, but disabling them may limit certain features of the Service. For more details, see our Cookie Policy (if applicable, linked at invoicefyapp.com/cookies).
Information from Third Parties: When you integrate the Service with external platforms (e.g., Stripe for payments, Google Workspace for authentication, or other APIs), we may receive data from those sources, such as account credentials or transaction confirmations. We also collect information from analytics providers like Google Analytics to monitor Service performance.
Communication Data: Any information you provide when contacting us, such as support inquiries, feedback, or survey responses.
We only collect information that is necessary for the purposes described in this Policy. We do not collect sensitive personal information (e.g., racial or ethnic origin, political opinions, religious beliefs, or health data) unless it is voluntarily provided by you in the context of your business operations and with your explicit consent.
4. How We Use Your Information
We use the collected information for legitimate business purposes to operate, maintain, and enhance the Service. Specific uses include:
Providing and Maintaining the Service: To create and manage your account, process transactions, generate and send invoices/proposals, facilitate payments, and enable integrations with third-party tools.
Improving and Personalizing the Service: Analyzing usage patterns to identify trends, troubleshoot issues, develop new features, and customize content or recommendations based on your preferences and behavior.
Communication: Sending you Service-related notifications (e.g., account updates, invoice confirmations), responding to your inquiries, and providing customer support. With your consent, we may also send promotional emails about new features, offers, or industry insights. You can opt out of marketing communications at any time via the unsubscribe link in emails or your account settings.
Security and Fraud Prevention: Monitoring for suspicious activity, preventing unauthorized access, and protecting against fraud, spam, or other malicious actions.
Legal and Compliance Obligations: To comply with applicable laws, respond to legal requests (e.g., subpoenas or court orders), enforce our Terms of Service, and protect our rights, property, or safety, as well as that of our users and the public.
Research and Analytics: Aggregating and anonymizing data for internal research, statistical analysis, and Service optimization. Anonymized data may be used to generate insights or reports without identifying individual users.
Business Operations: Managing billing, auditing, and administrative functions, including data backups and disaster recovery.
We process your information based on legal grounds such as your consent, the performance of a contract (e.g., providing the Service), our legitimate interests (e.g., improving security), or compliance with legal obligations.
5. Sharing Your Information
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information in the following limited circumstances:
With Service Providers and Partners: We engage trusted third-party vendors to perform functions on our behalf, such as payment processing (e.g., Stripe), cloud storage (e.g., AWS), analytics (e.g., Google Analytics), and email delivery. These providers are contractually obligated to use your information only for the purposes we specify and to maintain appropriate security measures.
For Legal Reasons: We may disclose information if required by law, regulation, or legal process (e.g., in response to a subpoena, warrant, or court order). We may also share data to enforce our rights, prevent illegal activities, or respond to emergencies involving potential harm.
In Business Transfers: If we undergo a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and provide options regarding your data where applicable.
With Your Consent: We may share information with third parties if you explicitly authorize it, such as through Service integrations or when you request us to do so.
Aggregated or Anonymized Data: We may share non-personal, aggregated data (e.g., usage statistics) with partners or for public reports, ensuring it cannot be used to identify you.
All shared parties are required to adhere to data protection standards comparable to ours.
6. Data Security
We prioritize the security of your information and implement reasonable administrative, technical, and physical safeguards to protect it from unauthorized access, disclosure, alteration, or destruction. These measures include encryption (e.g., SSL/TLS for data in transit), access controls, regular security audits, and employee training on data protection.
Despite our efforts, no method of transmission or storage is completely secure. We cannot guarantee absolute security, but we commit to notifying you and relevant authorities of any data breaches as required by law. You play a role in security by using strong passwords, enabling two-factor authentication (where available), and not sharing your credentials.
7. Your Rights and Choices
We respect your privacy rights and provide mechanisms to exercise them, subject to applicable laws and verification of your identity. Depending on your location, these may include:
Access and Correction: Request a copy of your personal information or correct inaccuracies.
Deletion: Request deletion of your data, subject to legal retention requirements.
Opt-Out: Withdraw consent for processing, object to certain uses (e.g., marketing), or opt out of data sales/sharing (under CCPA/CPRA).
Portability: Receive your data in a structured, machine-readable format.
Non-Discrimination: We will not discriminate against you for exercising your rights.
To submit a request, contact us at hello@cacele.com. We will respond within the timeframes required by law (e.g., 30 days under GDPR, 45 days under CCPA). For California residents, you may designate an authorized agent to make requests on your behalf.
We retain your information for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, or enforce agreements. For example, account data may be retained while your account is active, with backups deleted within 30 days of termination.
8. Children's Privacy
The Service is not directed to individuals under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we learn that we have inadvertently collected such information, we will delete it promptly. If you believe a child has provided us with personal information, please contact us immediately.
9. International Data Transfers
Your information may be processed and stored in the United States or other countries where we or our service providers operate. These locations may have data protection laws different from those in your country. We ensure appropriate safeguards, such as Standard Contractual Clauses (under GDPR) or other approved mechanisms, to protect transferred data and maintain compliance with international standards.
10. Changes to This Privacy Policy
We may revise this Privacy Policy to reflect changes in our information practices, technology, or legal requirements. We will post the updated Policy on our website and notify you via email or prominent in-Service notices for material changes. Your continued use of the Service after the effective date constitutes acceptance of the revised Policy. We recommend reviewing this Policy regularly.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: hello@cacele.com
We are committed to addressing your inquiries promptly and transparently.
By accessing or using the Service, you acknowledge that you have read, understood, and agree to this Privacy Policy and our data handling practices.