Privacy Policy

Who we are

Invoice 14 is operated by James Irving-Swift, a self-employed professional (autónomo) registered in Spain ("we", "us"). For anything related to this policy or your personal data, contact hello@invoice14.com.

We are the data controller for the account and profile data described below. For the customer records you store in the service (your clients’ names, tax IDs, addresses and invoices), you are the data controller and we process that data on your behalf, solely to provide the service.

What data we process

Account data: your email address and authentication details, managed through our sign-in provider Clerk. We never see or store your password.

Business profile data: the issuer details you enter in Settings (legal name, tax ID, address, bank details) so they can appear on your invoices.

Content you create: customers, products, quotes, invoices, payments, and the emails you send through the service, including delivery logs.

We use privacy-preserving product analytics (PostHog, hosted in the EU) to understand how the service is used. It stores nothing on your device — no cookies, no local storage — and, while you are signed in, events are linked to your account id only. We do not use advertising trackers, and we do not sell or share personal data for advertising.

Why we process it

To provide the service you signed up for (performance of a contract), to comply with legal obligations that apply to us, and — for basic security logging — our legitimate interest in keeping the service safe.

If you check a customer’s VAT number, that number is sent to the European Commission’s VIES service to perform the validation.

Where your data lives and who helps us

The application and its database are hosted with DigitalOcean in Frankfurt, Germany (EU).

We use a small number of service providers as processors: Clerk (authentication), DigitalOcean (hosting), Resend (email delivery), PostHog (product analytics, EU-hosted), and Sentry (error reporting, EU-hosted). Some of these providers are US companies; where data leaves the EEA it is protected by the EU–US Data Privacy Framework or Standard Contractual Clauses.

Cookies

The service uses only strictly necessary cookies: the session cookies set by our authentication provider so you can stay signed in. Our analytics runs without cookies or local storage, and there are no advertising or cross-site tracking cookies, which is why no cookie consent banner is shown.

How long we keep data

Your data is kept while your account is active. You can download a full export or permanently delete your workspace at any time from Settings. Remember that Spanish law requires businesses to retain issued invoices (generally at least four years) — export your records before deleting them.

Your rights

You have the right to access, rectify, erase, and receive a portable copy of your personal data, and to restrict or object to certain processing. Settings includes self-service export and deletion; for anything else, email hello@invoice14.com.

If you believe we have mishandled your data, you can lodge a complaint with the Spanish supervisory authority, the Agencia Española de Protección de Datos (aepd.es).