Privacy Policy

We collect information needed to provide and secure the service, including:

• Account and business details, such as names, email addresses, phone numbers, company details, addresses, tax details, and banking information.
• Customer and transaction records entered by authorised users, including quotations, invoices, payments, receipts, products, expenses, and supporting documents.
• Support and communications data, including support tickets, live-chat messages, email, and WhatsApp conversations and attachments.
• Technical information such as sign-in activity, session data, IP address, browser/device information, audit records, and service error logs.
• Subscription and payment information. Payment providers may process card, mobile-money, or bank details directly under their own privacy terms.

• Provide invoicing, quotation, payment, receipt, reporting, customer-support, and messaging features.
• Authenticate users, enforce permissions, prevent fraud, investigate misuse, and maintain audit trails.
• Deliver documents and service messages by email or WhatsApp when a user requests or enables those features.
• Process subscriptions, service payments, and account administration.
• Maintain, troubleshoot, analyse, and improve the reliability and usability of the platform.
• Meet legal, regulatory, accounting, tax, security, and dispute-resolution obligations.

A business using InvoZim controls the customer and employee information it enters into its workspace. That business is responsible for having a lawful reason to collect and use that information, keeping it accurate, and giving its customers any notices required by law. InvoZim processes this workspace data to provide the service and follows the authorised instructions of the business account holder.

We do not sell personal information. We may share only what is necessary with:

• Service providers that support hosting, storage, email, WhatsApp or SMS delivery, payment processing, security, analytics, and customer support.
• Authorised users within the relevant business workspace, according to their assigned role.
• Government, regulatory, law-enforcement, or professional advisers when disclosure is legally required or needed to protect rights, safety, and the service.
• A successor organisation if the platform is involved in a merger, acquisition, restructuring, or sale, subject to appropriate confidentiality protections.

When messaging features are used, message content, contact details, delivery information, and attachments may pass through the selected communications provider. Do not send passwords, full payment-card details, or unnecessary sensitive information through chat. Messages may be retained with the related business or support record. Third-party messaging providers process information under their own terms and privacy policies.

Information is retained while an account is active and for as long as reasonably necessary to provide the service, maintain backups and audit records, resolve disputes, prevent abuse, and comply with legal, tax, and accounting requirements. Retention periods vary by record type. Where deletion is permitted, information may remain temporarily in protected backups until those backups expire.

We use administrative, technical, and organisational safeguards designed to protect information, including access controls, role-based permissions, session security, audit records, and protected infrastructure. No internet service can guarantee absolute security. Account holders must use strong credentials, protect access devices, assign the minimum necessary permissions, and report suspected unauthorised access promptly.

Subject to applicable law, you may ask to access, correct, update, restrict, object to, export, or delete personal information. Workspace customer data requests should normally be directed first to the business that entered the data. You may opt out of non-essential marketing messages, but operational and security messages may still be sent. We may need to verify identity and authority before completing a request.