Introduction
WaffleInvoice ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our service.
Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our service.
Information We Collect
Account Information
When you create a WaffleInvoice account, we collect information such as your name, email address, business name, phone number, and billing address. This information is required to set up and manage your account.
Usage Data
We automatically collect information about your interactions with our service, including features used, invoices created, estimates sent, payments processed, and other usage patterns. This helps us improve our service and understand how our users work.
Payment Information
When you upgrade to our Pro plan or process payments through WaffleInvoice, payment information including credit card details are processed securely through Stripe, our third-party payment processor. We do not store your full payment card information on our servers.
Client and Contact Information
Your invoices, estimates, and client data are stored in your WaffleInvoice account. This information belongs to you and remains private to your account unless you choose to share it with your clients.
Device and Connection Information
We collect information about the devices and browsers you use to access WaffleInvoice, including IP address, browser type, operating system, and referring URL. This helps us provide a secure service and understand how our users access our platform.
How We Use Your Information
- To provide, maintain, and improve our service
- To process your account and send you related information
- To send transactional emails (signup confirmations, password resets, billing notifications)
- To send marketing emails about new features (only if you've opted in)
- To respond to your inquiries and support requests
- To detect, prevent, and address fraud and technical issues
- To comply with legal obligations
- To understand how our service is used and improve user experience
Data Sharing
Stripe (Payment Processing)
We share payment information with Stripe to process Pro plan subscriptions and client payments. Stripe is PCI-DSS Level 1 certified and handles payment data according to strict security standards. Please review Stripe's privacy policy for more information.
Mailgun (Email Delivery)
We use Mailgun to deliver transactional emails (invoices, estimates, reminders, notifications). Mailgun receives your email address and the content you choose to send to your clients. Please review Mailgun's privacy policy for more information.
No Third-Party Marketing
We do not sell your personal information to third parties. We do not share your data with marketing partners or data brokers. The only third parties who receive your data are the service providers listed above who help us operate WaffleInvoice.
Legal Requirements
We may disclose your information if required by law, court order, government request, or to protect the rights, privacy, safety, or property of WaffleInvoice, our users, or the public.
SMS and Text Messaging
When you (a WaffleInvoice user) enable SMS reminders, WaffleInvoice processes phone numbers and message content on behalf of your business in order to send transactional invoice reminders, payment confirmations, and one-time consent requests to your customers. Phone numbers and message bodies are stored in our database in association with the customer record and the originating user account.
What we store: the customer phone number, opt-in and opt-out timestamps, the body of each SMS sent and received, the carrier provider message ID, delivery status, and any error information returned by the carrier. We retain these records for as long as the user account is active so we can provide accurate billing usage history and audit trails for compliance.
Carrier and processor: SMS messages are transmitted through Twilio Inc., which acts as a sub-processor. Twilio's privacy practices are governed by Twilio's own privacy notice. We share with Twilio only the information needed to deliver each message (recipient number, sender number, body) and we receive back delivery status events and any inbound replies.
Customer rights: recipients of SMS messages may opt out at any time by replying STOP, UNSUBSCRIBE, CANCEL, END, or QUIT. Opt-out is honored across all reminders sent through WaffleInvoice for that recipient phone number, regardless of which user added the number. Recipients may reply HELP to receive contact information.
No marketing or sale of phone data: we do not use customer phone numbers for marketing, advertising, profiling, or any purpose other than fulfilling the transactional SMS that the WaffleInvoice user has configured. We do not sell or share customer phone numbers with third parties for their own marketing purposes.
Data Retention
We retain your account information for as long as your account is active. If you delete your account, we retain aggregated and anonymized data for analytics and legal compliance purposes. We maintain backups of deleted data for 30 days.
You can request permanent deletion of all your data by contacting us at support@waffleinvoice.com. We will process your request within 30 days.
Your Privacy Rights
Access Your Data
You have the right to access your personal data and request a copy of the information we hold about you. You can access most of this information directly in your account settings.
Correct or Update
You can update your account information at any time by logging into your account or contacting us at support@waffleinvoice.com.
Delete Your Data
You have the right to request deletion of your data. You can delete your account directly from account settings, or contact us for assistance.
Export Your Data
You have the right to export your data in a portable format. Contact us at support@waffleinvoice.com to request a data export.
Opt Out of Marketing
You can opt out of marketing emails by unsubscribing via the link in any marketing email or by updating your notification preferences in account settings.
Cookies and Similar Technologies
We use cookies to store session information, maintain your login, prevent fraud, and remember your preferences. These are essential for the service to function properly.
For more information about the cookies we use and how to manage them, please see our Cookie Policy.
Security
We implement industry-standard security measures including SSL encryption, secure authentication, regular security audits, and secure data storage. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
If you discover a security vulnerability, please report it to security@waffleinvoice.com.
Children's Privacy
WaffleInvoice is not intended for children under 13 years old. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will promptly delete such information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or other reasons. We will notify you of significant changes by posting the new Privacy Policy and updating the "Last updated" date at the top of this page.
Your continued use of WaffleInvoice after changes become effective constitutes your acceptance of the updated Privacy Policy.
Contact Us
If you have questions about this Privacy Policy, how we collect or use your information, or would like to exercise your privacy rights, please contact us:
Email: support@waffleinvoice.com
Response time: We respond to privacy inquiries within 30 days