Privacy Policy — Hala‑Invoice

1. Who we are

Hala‑Invoice (the "Controller" for account data and the "Processor" for invoice content you upload).

Contact: info@hala-invoice.com

Jurisdiction: Kingdom of Saudi Arabia (KSA). We may use providers in other countries to run the Service.

2. Data we collect

• Account data: name, email, phone, company name, role, password hashes, settings.
• Signed-in workspace data ("Customer Data"): customer and invoice records already stored in a workspace, including items, amounts, VAT, buyer/seller details, invoice numbers, notes, and logos.
• Free-generator draft: we do not collect its invoice content; the current draft remains only in this browser's local storage.
• Security and service logs: IP address, browser information, request metadata, errors, and security events needed to operate and protect the Service. Marketing analytics is not currently mounted.
• Support content: messages, email threads, recordings/screenshots you choose to share.
• Cookies & similar: to keep you signed in, remember preferences, and prevent abuse.

You are responsible for the legality and accuracy of any personal data you include in invoices (e.g., your customers' details).

3. Why we use your data

• Provide and secure signed-in services (authentication, authorized workspace access, storage, back-ups, and abuse prevention).
• Run the free generator locally in your browser, including totals/VAT calculations and the draft-expiry check described below.
• Comply with applicable law (e.g., e‑invoicing formats or retention requirements).
• Diagnose errors and improve reliability without marketing analytics.
• Communicate with you (service notices, security alerts, support).
• Marketing analytics or billing will require a separate product and privacy review before either is enabled.

Where required by law, our legal bases include performance of a contract, legitimate interests, consent, and compliance with legal obligations.

4. Free generator draft storage

The no-account free generator runs in your browser. To help you continue an unfinished invoice, it saves the current draft — including the invoice details you enter and any uploaded logo — in browser localStorage on that device.

The free generator does not upload the draft to our servers, does not retain it on our servers, and does not create a public share link. The local record carries an expiry 30 days after its last saved change. The next time the generator reads the draft, it checks that expiry and removes an expired record. A browser cannot remove the record while the site is closed, so it may remain on the device until you return or clear it yourself.

Select New Invoice in the generator to clear the current draft, or clear your browser data for this site in browser settings to remove it manually. Clearing browser data, using private-browsing mode, or changing devices may remove or make the draft unavailable.

5. Sharing & transfers

We share data only with:

• Service providers/sub-processors needed for hosting, databases, Google sign-in, operational logging, and content delivery. Marketing analytics and payment processing are currently disabled. Providers may process data outside KSA subject to contracts and safeguards.
• Legal compliance (e.g., lawful requests, fraud, security, protecting our rights or users).
• Business transfers (merger, acquisition). We will notify you if ownership changes.

We do not sell your personal information.

We do not share free-generator draft content with service providers because it is not uploaded to our servers.

6. Security

We use protections including encryption in transit and access controls. No system is 100% secure; please keep your sign-in credentials safe.

7. Your rights & choices

Depending on your region, you may have rights to access, correct, delete, export, or object/restrict processing. We honor reasonable requests after verifying your identity.

• Email: info@hala-invoice.com
• Browser storage: you can clear cookies and localStorage in your browser settings, but doing so may sign you out and delete your local draft.

For Customer Data you control (invoice contents), we will route requests to your administrator if applicable.

8. International transfers

If we transfer data outside your country, we use contractual protections and technical safeguards. Use of the Service may involve processing in regions other than KSA.

9. Data retention & deletion

• Account data: kept while your account is active and as needed for legal/accounting purposes.
• Free-generator drafts: stored only in your browser and handled by the 30-day expiry-on-read rule in Section 4.
• Signed-in Customer Data: kept while needed to provide the workspace and meet applicable legal obligations, or until an authorized deletion request is completed.
• You can request deletion at any time; some logs/archives may persist for limited periods for security or legal reasons.

10. Children

The Service is not intended for children under 13 (or the age required in your region). Do not submit children's data without a lawful basis.

11. Changes to this policy

We may update this policy. We'll post the new version with a new "Last updated" date and, for material changes, notify you by email or in‑app.

12. Contact

Questions or requests: info@hala-invoice.com.

Postal address available upon request.