Last updated: 2026-09-30.
The short version
The invoice data you type - client names, addresses, amounts, your own bank details, an uploaded logo - is processed in your browser and is never transmitted to our servers. The PDF is assembled on your device. Drafts are saved in your browser's local storage so you can come back to them; clearing site data deletes them permanently.
Stored locally in your browser
- Draft invoice state: every field in the form, including client details and amounts.
- Numbering history: the invoice numbers you have used, so the next one can auto-increment.
- Saved invoice list: the invoices you chose to keep in the list, up to the limit of your plan.
- Preferences: currency, terms, and template choices.
- Pro entitlement token, if you subscribed: an email address and an expiry date in a signed string.
These are readable by any script running on this site while you use it, which is why the tool works without a server. They are not readable on another device or browser profile.
If you buy InvoiceKit Pro
Checkout is handled by Stripe Inc. on Stripe's own pages under Stripe's privacy policy. Your card number, expiry and CVC go to Stripe only; they never reach this site, our worker, or our logs. What we keep on our side is small and deliberately so: your billing email address, the plan you bought, the current-period end date, and the Stripe subscription identifier. That record lives in one key-value row on our hosting provider and exists for exactly one purpose - knowing whether to keep the paid features switched on. Stripe separately keeps its own transaction records because tax law requires it to, for a much longer period.
Your Pro unlock is also stored in your browser's local storage as a signed token, so the tool page can check entitlement without a round trip. Clearing site data removes it; emailing the billing address restores it.
The legal basis for keeping that one row is performance of the contract you bought (GDPR Article 6(1)(b)). It is retained while the subscription is active plus a short grace period for support questions, then deleted. Asking us to delete it ends access to the paid features; it does not delete the invoices you downloaded, which were never on our servers.
Collected by us or our providers
Aggregate, cookie-less traffic measurement (page viewed, approximate region, referrer, device class) may be used to understand which tools get used. Hosting and CDN providers necessarily see IP addresses and request metadata as part of delivering pages.
No advertising scripts are loaded, so no advertising cookies are set by this site. If that ever changes, this page is updated before the first ad script loads and the additional categories are named there with the vendor, with a consent banner wherever the law requires one.
Your rights
You can ask for confirmation of what is held about you, correction, deletion, or a copy, and you can object to processing. Email [email protected]. If you never subscribed we hold nothing identifying about you at all; if you did, the record is the single billing row described above, and we can export or delete it on request and confirm it in writing. You may also complain to your local supervisory authority (in the EU, the authority of your country of residence).
Children
These tools are for business use and are not directed at children under 16. We do not knowingly collect data from children.
Changes
Material changes are posted on this page with a new date. Continued use after a change means the revised policy applies.
Free invoice generator · Freelance invoice generator · Pricing · Contact