PasteInvoice Privacy Policy
Last updated: October 14, 2026
PasteInvoice ("the app") is made by IronForge ("we"). This policy explains what happens to your data.
The short version
- No account. We don't run servers that store your invoices, clients or business details.
- Your documents, clients and settings are stored only on your device (and in your own Android/Google backup if you have it enabled).
- When you use AI drafting, the text you paste is sent over an encrypted connection to our server (hosted on Supabase), which passes it to Google's Gemini model to extract invoice details. We don't store that text.
- If you leave Settings → Share anonymous usage & crash reports on, the app sends anonymous usage events (for example "invoice sent" or "paywall viewed") and crash reports. They never contain invoice contents, client details, amounts or your business details. You can turn this off at any time.
- No ads, no ad trackers, and we don't sell data.
Data processed
| Data | Where it goes | Why |
|---|---|---|
| Invoices, estimates, receipts, clients, items, business profile, logo, signature | Stored on your device only | Core app function |
| Text you submit for AI drafting | Sent to our Supabase Edge Function, then to Google's Gemini API; not stored by us | Extract client, items and prices from your text |
| Anonymous device ID and daily AI usage count | Stored in our Supabase database | Apply fair-use limits to the AI feature; it isn't linked to your name, email or invoices |
| Anonymous usage events: event name, small technical flags (e.g. document type, plan chosen, whether a payment link was used), app version, time | Stored in our Supabase database, linked only to the anonymous device ID | Understand which features work and fix problems; optional (Settings → Share anonymous usage & crash reports) |
| Crash reports: error stack trace, app version, Android version, device model | Stored in our Supabase database, linked only to the anonymous device ID | Fix crashes; optional (same setting) |
| Your payment link (e.g. PayPal.me, Stripe) | Stored on your device and printed on your invoices; never sent to us | Let your clients pay you online |
| Bot check (Cloudflare Turnstile): technical signals from a hidden check page, such as browser and device characteristics | Processed by Cloudflare when the app first connects to our server; we only receive a pass/fail token | Stop automated abuse of the free AI feature |
| Purchase status | Google Play Billing | Unlock Pro features |
Our processors handle data under their own terms: Supabase privacy, the Gemini API terms and Cloudflare Turnstile privacy. If you don't want text sent to Google, turn off Settings → Use AI drafting. The app then works fully offline with on-device extraction and manual entry.
Backups and export
Backup files you export are saved wherever you choose (for example Google Drive or your Downloads folder). We never receive them.
Permissions
- Internet: AI drafting, anonymous usage stats and Google Play purchases.
- Notifications (optional): reminders about overdue invoices and recurring invoices that are ready. You can refuse or turn them off in Android settings.
- The app does not request access to your photos, contacts, location, microphone or files. Logo images are chosen with the system photo picker, and voice input uses your device's speech service.
Children
The app is a business tool and isn't directed at children under 13.
Deleting your data
Uninstalling the app deletes all of its data on your device. You can also delete individual documents in the app. You can delete everything stored on our servers at any time in Settings → Your data → Delete my data from our servers (details: delete your data). Otherwise, usage events and crash reports are kept for at most 12 months and then deleted. They are tied only to a random anonymous ID, so we can't link them to you. Turning the setting off stops anything new from being sent.
Contact
Questions or requests: ahmedmribai92@gmail.com