InvoSay ← Back

Privacy Policy — InvoSay

Last updated: September 24, 2026

InvoSay ("we", "us", "the app") is developed by Yaxbi Technologies LLC, based in Dubai, United Arab Emirates. We respect your privacy. This document explains what data the app collects, why, and your rights regarding it.

InvoSay does not use analytics or advertising SDKs, and does not access or share any advertising identifier (such as Apple's IDFA). The only data we collect is what's needed to create your account, build your invoice, and keep the app running.

1. Data we collect

CategorySourceWhy we collect it
NameGoogle Sign-In or Sign in with Apple (via Supabase Auth)To identify your account
Email addressGoogle Sign-In or Sign in with Apple (via Supabase Auth)Account management; attached to crash reports for debugging
Voice or sound recordingsYour device microphone, when you record an invoiceTranscribed to text so the app can fill in your invoice — sent to Deepgram (live and batch transcription) via our backend
Invoice transcript / user-generated contentThe text transcript of what you saidSent to Anthropic (via our backend) to extract the client, job, and amount fields for your invoice
Crash logsFirebase CrashlyticsTo diagnose and fix crashes

Your invoices, clients, and business details are stored locally on your device and are not synced to our servers.

2. How we use your data

3. Sharing

We do not sell your personal data. The following third-party services process data on our behalf, strictly to provide the app's features:

4. Your rights

You can:

Data is fully purged within 30 days of deletion.

5. Security

Data is encrypted in transit (HTTPS/WSS) between your device and our services. Any secrets stored locally on your device are encrypted using the device's secure hardware storage — the iOS Keychain or Android Keystore, depending on platform. Our backend is hosted in the United States.

6. Children

InvoSay is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us at info@yaxbi.com and we will delete it.

7. International transfers / GDPR

If you are located in the EU/EEA, we process your data as described above, which may involve transferring it to service providers located outside the EU/EEA (including the United States). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses. You have the right to access, correct, delete, restrict, or port your data, and to object to certain processing — contact info@yaxbi.com to exercise these rights.

8. California residents / CCPA

If you are a California resident, you have the right to know what personal information we collect, to request deletion of that information, and to opt out of the "sale" or "sharing" of personal information (we do not sell your personal data). To exercise these rights, contact info@yaxbi.com.

9. Changes to this policy

We will update this page when our practices change. The "Last updated" date at the top reflects the most recent change.

10. Contact

Privacy questions: info@yaxbi.com. Yaxbi Technologies LLC, Dubai, United Arab Emirates.