Privacy Policy

The short version

If you use Zenvoi without an account, we collect nothing. Your invoice data stays in your browser. If you sign up for Pro, we store your email, name, and invoice data in encrypted cloud storage so you can sync across devices. We never sell your data to anyone.

1. Information We Collect

Free users (no account)

We do not collect any personal information from free users. All invoice data, business details, and logos are stored locally in your browser using localStorage. We cannot see, access, or recover this data.

Pro users (with account)

When you create an account, we collect:

• Email address - for authentication and account-related communications
• Display name - shown in your profile
• Invoice data - stored in Cloud Firestore for sync and dashboard features
• Payment info - processed by Dodo Payments; we never store your card details

2. How We Use Your Information

We use your information to:

• Provide and maintain the service
• Process subscription payments
• Sync your invoices across devices
• Send transactional emails (receipts, password resets)
• Respond to support requests

We do not use your data for advertising, profiling, or selling to third parties.

3. Third-Party Services

We use the following third-party services:

• Firebase (Google) - authentication and cloud database
• Dodo Payments - subscription billing and payment processing
• Vercel - hosting and serverless functions
• Google Gmail API - optional, only when you connect your Gmail account to send invoices

Each service has its own privacy policy. We only share the minimum data needed for each service to function.

4. Google User Data and Gmail API

Zenvoi offers an optional integration with Gmail that lets you send invoice emails directly from your own Gmail account. This section describes how we handle Google user data, and applies only if you choose to connect Gmail.

Scopes we request

• https://www.googleapis.com/auth/gmail.send - used exclusively to send invoice emails on your behalf to recipients you specify. We never read, list, modify, or delete any messages in your Gmail account.
• https://www.googleapis.com/auth/userinfo.email - used once during connection to confirm which Gmail account is linked, so you can see it in your settings.

How we use Google user data

We use the Gmail API only when you explicitly click “Send” on an invoice. At that moment, we compose the invoice email (subject, body, and PDF attachment) and call the Gmail API to send it from your connected account. We do not send emails automatically, in bulk, or for any purpose other than the specific invoice you just asked us to send.

We store an OAuth refresh token and access token for your Gmail account in encrypted Firestore storage so that you do not have to reconnect Gmail each time you send an invoice. We also store the connected Gmail email address so we can display it in your settings. We do not store, log, cache, or analyze the contents of any email you send.

Limited Use disclosure

Zenvoi's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we will not:

• Use Google user data to serve advertising, including retargeting, personalized, or interest-based advertising.
• Sell Google user data or transfer it to a data broker, data reseller, or any information-resale service.
• Use Google user data for any purpose unrelated to the invoice sending feature you have enabled.
• Allow humans to read Google user data, except (a) with your explicit consent for a specific message, (b) as strictly necessary for security investigations, or (c) to comply with applicable law.

Disconnecting Gmail

You can disconnect Gmail at any time from your Zenvoi settings page. Disconnecting immediately deletes the stored OAuth tokens and the connected email address from our database. You can also revoke access directly from your Google Account permissions page.

5. Cookies

We use a single authentication cookie (__session) to keep you signed in. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

6. Data Storage and Security

Pro user data is stored in Google Cloud Firestore with encryption at rest and in transit. Firebase Authentication handles credential storage with industry-standard security practices.

Free user data is stored entirely in your browser. Clearing your browser data will permanently delete it.

7. Data Deletion

Free users: Clear your browser's localStorage to delete all data.

Pro users: Contact us through the support page to request full account and data deletion. We will process deletion requests within 30 days.

8. Children's Privacy

Zenvoi is not intended for children under 13. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this policy as our service evolves. We will notify registered users of material changes via email. Continued use of the service after changes constitutes acceptance.

10. Contact

Questions about your privacy? Reach out through our support page.