Privacy Policy

Last updated: September 11, 2026

This policy explains how InvoicePig collects and uses personal information when you use the InvoicePig website, invoice editor, account, billing features, or MCP service. It is intended to be read with our Terms of Service and Cookie Policy.

1. Who we are

InvoicePig is operated by AVENKARA CO., LTD.. The business address is Suite 3064, 30th Floor, Bhiraj Tower at EmQuartier, 689 Sukhumvit Rd, Khlong Tan Nuea, Watthana, Bangkok 10110, Thailand. The company registration number is 0105568115817. For privacy questions, data requests, or legal notices, contact support@invoicepig.com.

2. Information we collect

  • Account and authentication information, such as your email, name, and account identifiers managed through Clerk.
  • Invoice information that you choose to enter, including business details, recipient details, line items, taxes, discounts, shipping, payment instructions, and uploaded logos.
  • Saved customers, invoice history, expenses, preferences, and workspace information when you choose to save them while signed in.
  • Billing and subscription information processed through Stripe. InvoicePig does not ask you to put card numbers into an invoice or MCP request.
  • Contact messages containing only the name you provide, your email, subject, and message. Newsletter sign-up collects your email and consent record only.
  • Essential security and service logs, plus Vercel Analytics, Vercel Speed Insights, and Microsoft Clarity data only after you accept analytics cookies. Speed Insights data is anonymous performance information such as route, device, network, country, and Web Vitals; public invoice and one-time logo upload pages are excluded.

3. Why we use information

  • To provide the editor, PDF generation, account, and workspace features.
  • To authenticate users, secure the service, prevent abuse, and troubleshoot failures.
  • To process subscriptions, payments, cancellations, and customer support requests.
  • To send a newsletter only when you separately opt in.
  • To measure site usage only after analytics consent is granted.
  • To meet legal obligations and protect the rights of users and InvoicePig.

Depending on the context, the legal basis may be performance of a contract, consent, legitimate interests, or compliance with a legal obligation. You may withdraw consent at any time without affecting earlier lawful processing.

4. Service providers

We use Clerk for authentication, Supabase for application data and private storage, Stripe for billing, Vercel for hosting and analytics, Microsoft Clarity for consent-based product analytics, and Google Gemini or ElevenLabs only when you use the related AI or voice feature. Providers receive only the information needed for their function and may process it in countries other than yours.

5. Retention and deletion

We keep account, invoice, customer, expense, and logo data while your account or saved feature requires it, and delete it when requested unless retention is required by law or needed to resolve a dispute. Contact messages are kept only while needed to respond and maintain support records. Newsletter records are retained until you unsubscribe. MCP PDF and ZIP artifacts are scheduled for deletion after 24 hours; their download links expire after 15 minutes. One-time logo upload links expire after 15 minutes and can be used once.

6. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection to processing, including direct marketing. You can withdraw analytics consent from the Cookie Policy or unsubscribe from the newsletter at any time. Send requests to support@invoicepig.com; we may need to verify account ownership before completing a request.

Thailand's Personal Data Protection Act may apply to processing connected with our Thailand-based operator. Requests remain subject to that law's exceptions and verification requirements.

7. International processing and security

Our providers may process information internationally. We use contractual, technical, and organizational safeguards appropriate to the data and applicable transfer rules. No internet service is completely secure, so do not submit card numbers, government identifiers, health information, passwords, API keys, or authentication codes in invoice fields, contact forms, or MCP requests.

8. Children and automated features

InvoicePig is a business service and is not directed to children. AI and voice features assist with content you provide; review every generated value before using an invoice. InvoicePig does not provide tax, legal, accounting, or regulatory advice.

9. Contact

Privacy requests and complaints can be sent to support@invoicepig.com. You may also contact the data-protection authority applicable to your location.