1. Architectural Privacy & Zero-Local-Storage Mandate
Freelancer Invoicing Suite operates under a strict Zero-Local-Storage Mandate. We never persist sensitive business data, client contacts, invoice line items, or financial totals in unencrypted browser storage (such as localStorage or sessionStorage). All application state is server-authoritative and protected by HTTP-only, SameSite cookies.
2. Information We Collect
We collect only the minimum information necessary to operate your invoicing platform:
- Account Identity: Your email address and securely hashed password (bcrypt) for authentication.
- Business Profiles: Business names, addresses, tax IDs, and payment instructions you configure for your invoices.
- Invoicing Data: Client contact details, line items, pricing, payment records, and retainer schedules that you create.
- Operational Telemetry: Anonymized server access logs including IP addresses, user agent headers, and request timestamps strictly for rate limiting, DDoS defense, and security integrity.
3. Server-Authoritative Multi-Tenancy & Data Isolation
Every database query executes through strict tenant boundary validation. Each user account operates as an isolated tenant. Business profiles, clients, and invoices belonging to Tenant A can never be queried, accessed, or modified by Tenant B under any circumstance.
4. Zero Third-Party Tracker or Advertising Networks
We do not embed third-party surveillance scripts, cross-site trackers, Facebook Pixel, Google Tag Manager advertising networks, or user session recording tools. Your financial activities and client relationships are never monetized, brokered, or shared with data brokers.
5. Public Share Links & Client Privacy
When you generate a public invoice link for a client (/view/{share_token}), access is gated by a cryptographically unguessable 24-character token. All public invoice views are served with noindex, nofollow robot directives and disallowed in robots.txt, ensuring search engine crawlers never index private invoices or client names.
6. Data Sovereignty & 1-Click Portability
You retain 100% ownership of your financial records. You can download a complete JSON archive of all business profiles, clients, invoices, payments, and schedules at any moment from your settings page. Upon account cancellation or deletion, all tenant records are permanently expunged from primary storage.
7. Contact Information
If you have questions regarding this Privacy Policy or your data rights, please contact our security team at [email protected].