Privacy policy
Zeabyte Limited (New Zealand) operates InvoiceCharlie. This policy explains what we collect, why, and your choices. Last updated 17 September 2026.
What we collect
- Account data: your email, name, business details you enter (address, tax number, logo, bank details for invoices).
- Business data you create: clients, invoices, quotes, payments, expenses, receipts and notes.
- Your clients’ details: names, emails and addresses you add so we can send documents on your behalf. You are responsible for having a lawful basis to share them with us.
- Usage & technical data: pages viewed, actions taken, IP address, browser type, and when a client opens an invoice link (used to show you “viewed” status).
- Payment data: handled by Stripe. We store Stripe identifiers, never full card numbers.
- Free invoice generator: invoices you make with the free tool are stored encrypted for 12 months so that, if you sign up with the same email, they are waiting in your account. We also use them to prevent abuse and to improve the tool. They are never sold, and you can ask us to delete them.
How we use it
- To provide the Service: creating and emailing documents, recording payments, reminders, reports.
- To bill you for paid plans and to prevent fraud and abuse.
- To email you about your account (sign-in links, receipts, important changes). Marketing emails only if you opt in; unsubscribe any time.
- To improve the Service using aggregated, de-identified usage statistics.
We do not sell personal data, and we do not use your data or your clients’ data to train AI models.
Who we share it with
Only service providers needed to run the Service, under contracts that restrict their use of the data: Amazon Web Services (hosting, storage, email delivery), Stripe (payments and billing), and Cloudflare (DNS and security). We disclose data when legally required.
Where it is stored
Data is stored on Amazon Web Services in the Asia-Pacific (Sydney) region, encrypted at rest and in transit, with daily backups.
How long we keep it
For as long as your account is open. After you close it, we delete your data within 90 days, except records we must keep for tax or legal reasons. Email logs are kept for 12 months for deliverability troubleshooting.
Your rights
You can access, correct, export or delete your data from within the Service or by emailing us. Depending on where you live (including under the NZ Privacy Act 2020, the Australian Privacy Act, the UK/EU GDPR), you may have additional rights; we honour them. Contact [email protected].
Cookies
We use a sign-in cookie and a cookie remembering which business you were working in. No third-party advertising cookies.
Children
The Service is for businesses and not directed at children under 16.
Changes
We will post updates here and, for material changes, email account owners.
Contact
Zeabyte Limited · [email protected]