Privacy Policy

This policy explains what information WA Invoices collects, why, and the choices you have. WA Invoices is run by Website Architechs ("we", "us").

Who this covers

• Businesses that create a WA Invoices account. For your own account details, we decide how that information is used.
• Your clients, whose details you add to send them invoices. For that information we act on your behalf and only use it to provide the service to you.

What we collect

• Account details: your email, password (stored only as a secure hash) and business name.
• Business details you add: address, phone, website, logo, brand color and invoice settings.
• Your clients' details and your invoices, estimates, payments, expenses and time entries.
• Payment connections: your PayPal or Stripe keys. Secret keys are encrypted before they're stored and are never shown again, not even to you.
• Basic activity: when an invoice link is opened, when emails are sent, and sign-in times, used to show statuses like "Viewed" and to keep accounts secure.

We don't sell personal information and we don't use it for advertising.

How we use it

• To run WA Invoices: create, send and track invoices, reminders and payments.
• To send emails you ask for (invoices, reminders, receipts) and account emails (confirmations, resets).
• To keep the service secure and prevent abuse.
• To answer you when you contact us.

Services we rely on

We use a small number of trusted providers to run WA Invoices. They process data only on our instructions:

• Supabase: database, file storage and logins (data stored in the United States).
• Vercel: hosting the website.
• Resend: sending emails.
• PayPal and Stripe: taking payments, when a business connects them. They handle card and bank details; we never see them.

How long we keep it

We keep your data while your account is open. When you delete your account, your business data, clients, invoices and logo are deleted straight away. Copies in service-provider backups are removed on their normal schedule.

Your choices and rights

• See and change your details in Settings and Account.
• Download all of your data at any time from Account → Your data.
• Delete your account at any time from Account → Delete account.
• Clients of a business using WA Invoices should contact that business first; we'll help them respond.

Depending on where you live, you may have further rights. Contact us to use them.

Security

Connections are encrypted, each business can only ever see its own data (enforced by the database itself), secret keys are encrypted, and two-step login is available for every account.

Cookies

We only use cookies needed to keep you signed in and remember your light/dark mode choice. We don't use advertising or tracking cookies.

Changes

If we change this policy in a meaningful way, we'll tell you by email or in the app.

Contact

Privacy questions or requests: luke.hendricks@websitearchitech.com.