Privacy Policy

1. Introduction

SleekInvoices ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our invoicing platform and services ("Service"). Please read this policy carefully to understand our practices regarding your personal data.

By using SleekInvoices, you consent to the data practices described in this policy. If you do not agree with our practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when using our Service:

• Account Information: Name, email address, and authentication credentials when you create an account
• Business Information: Company name, address, logo, and tax identification numbers
• Client Data: Names, email addresses, and contact information of your clients
• Invoice Data: Invoice details, line items, amounts, and payment information
• Payment Information: Billing details processed through our payment providers
• AI Interactions: Prompts and content you provide when using our AI-powered features (Sleeky AI)

2.2 Information Collected Automatically

When you access our Service, we automatically collect certain information:

• Usage Data: Pages visited, features used, actions taken, and time spent within the Service
• Device Information: Browser type, operating system, device type, and screen resolution
• Log Data: IP addresses, access times, referring URLs, and error logs
• Analytics Data: Aggregated usage patterns and performance metrics
• Cookies: Session cookies and authentication tokens to maintain your login state

2.3 Information from Third-Party Integrations

When you connect third-party services like QuickBooks Online, we may receive:

• OAuth tokens to maintain the connection (we do not store your QuickBooks password)
• Company information from your QuickBooks account
• Customer and invoice data necessary for synchronization

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide the Service you requested (e.g., creating invoices, managing clients)
• Legitimate Interests: Processing for our legitimate business interests, such as improving the Service, preventing fraud, and ensuring security
• Consent: Processing based on your explicit consent, such as for marketing communications or optional AI features
• Legal Obligation: Processing required to comply with applicable laws and regulations

4. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve the Service
• Process invoices and manage your client relationships
• Power AI features including Sleeky Smart Compose and Sleeky AI Assistant
• Synchronize data with connected third-party services (e.g., QuickBooks)
• Send transactional emails (invoice notifications, payment confirmations)
• Provide customer support and respond to inquiries
• Analyze usage patterns to enhance user experience
• Detect and prevent fraud or security issues
• Comply with legal obligations

5. AI Features and Automated Processing

SleekInvoices includes AI-powered features ("Sleeky AI") that use machine learning to assist you:

5.1 AI Features We Offer

• Sleeky Smart Compose: Generates invoice content from natural language descriptions
• Sleeky AI Assistant: Provides conversational help with invoicing tasks

5.2 How AI Data is Processed

When you use AI features:

• Your prompts and inputs are sent to third-party AI providers for processing
• AI responses are generated based on your input and general training data
• We do not use your specific business data to train AI models
• AI interactions may be logged for quality improvement and abuse prevention

5.3 Automated Decision Making

Our AI features assist with content generation but do not make legally significant automated decisions about you. You always have final control over invoice content and business decisions. If you have concerns about automated processing, you may contact us to request human review.

6. Data Sharing and Disclosure

We may share your information with:

6.1 Service Providers (Subprocessors)

We work with trusted third-party companies to operate the Service:

• Manus: Platform infrastructure, hosting, database, file storage, and authentication services
• Stripe: Payment processing and subscription management
• NOWPayments: Cryptocurrency payment processing
• Resend: Transactional email delivery
• OpenRouter: AI model routing for Sleeky AI features
• Intuit QuickBooks: Accounting integration (when connected by you)

6.2 Platform Provider

SleekInvoices is built and hosted on the Manus platform. Manus provides our infrastructure including servers, databases, file storage, and authentication services. Your data is stored on Manus infrastructure and is subject to both this Privacy Policy and Manus's Privacy Policy. Manus processes your data solely to provide infrastructure services to SleekInvoices and does not use your data for its own purposes.

6.3 Third-Party Integrations

When you authorize integrations (such as QuickBooks Online), we share necessary data to enable synchronization. You control these connections and can disconnect them at any time from your Settings page. Each integration is subject to the third party's own privacy policy.

6.4 Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect our rights, property, or safety, or the rights, property, or safety of others.

6.5 Business Transfers

If SleekInvoices is involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

7. QuickBooks Integration

When you connect SleekInvoices to QuickBooks Online:

• We use OAuth 2.0 for secure authentication — we never see or store your QuickBooks password
• We access only the data necessary for invoice and customer synchronization
• Data flows one-way from SleekInvoices to QuickBooks (we push invoices and customers)
• You can disconnect the integration at any time, which revokes our access
• Your QuickBooks data is also subject to Intuit's Privacy Policy

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

• All data is transmitted over HTTPS/TLS encryption
• Data is encrypted at rest in our databases
• OAuth tokens and sensitive credentials are stored securely
• Access to production systems is restricted and logged
• Regular security assessments and updates
• Multi-factor authentication available for user accounts

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach, we will notify affected users and relevant authorities as required by applicable law.

9. Data Retention

We retain your data according to the following guidelines:

• Active Account: Data is retained for as long as your account is active
• Account Deletion: Personal data is deleted or anonymized within 30 days of account deletion
• Subscription Cancellation: Data is retained for 90 days after cancellation to allow reactivation
• Legal Requirements: Some data may be retained longer if required by law (e.g., financial records)
• Backups: Data may persist in encrypted backups for up to 90 days after deletion

10. Your Rights

10.1 Rights Under GDPR (EEA Users)

If you are in the European Economic Area, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Portability: Receive your data in a portable, machine-readable format
• Objection: Object to certain processing of your data
• Restriction: Request limited processing of your data
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

10.2 Rights Under CCPA (California Residents)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to Know: Request disclosure of the categories and specific pieces of personal information collected
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt-out of the sale or sharing of personal information
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights

10.3 Do Not Sell My Personal Information

We do not sell your personal information. SleekInvoices does not sell, rent, or trade your personal data to third parties for monetary consideration. We share data only with service providers who help us operate the Service, as described in this policy.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days (or as required by applicable law).

11. Cookies and Tracking

We use the following types of cookies and similar technologies:

• Essential Cookies: Required for the Service to function (authentication, session management)
• Analytics Cookies: Help us understand how users interact with the Service (aggregated, anonymized)

We do not use advertising or tracking cookies. You can configure your browser to refuse cookies, but this may affect your ability to use certain features of the Service.

12. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws, including Standard Contractual Clauses where required for transfers from the EEA.

13. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly. If you believe we have collected information from a child, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes that affect your rights, we will also notify you via email. We encourage you to review this policy periodically.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For users in the EEA, you also have the right to lodge a complaint with your local data protection authority if you believe we have not adequately addressed your concerns.