Privacy Policy — Hala‑Invoice

1. Who we are

Hala‑Invoice (the "Controller" for account data and the "Processor" for invoice content you upload).

Contact: support@hala-invoice.com

Jurisdiction: Kingdom of Saudi Arabia (KSA). We may use providers in other countries to run the Service.

2. Data we collect

• Account data: name, email, phone, company name, role, password hashes, settings.
• Invoice data ("Customer Data"): items, amounts, VAT, buyer/seller details, invoice numbers, attachments, notes, logos.
• Usage & device data: IP, device/browser info, pages and features used, app events, crash logs.
• Payment & billing data (if you buy a paid plan): billing contact, transaction identifiers (actual card data is handled by our payment processor).
• Support content: messages, email threads, recordings/screenshots you choose to share.
• Cookies & similar: to keep you signed in, remember preferences, measure performance, and prevent abuse.

You are responsible for the legality and accuracy of any personal data you include in invoices (e.g., your customers' details).

3. Why we use your data

• Provide and secure the Service (authentication, invoice generation, storage, back‑ups, abuse prevention).
• Run features such as sequential invoice numbers, totals/VAT calculations, and expiration/auto‑delete windows.
• Comply with applicable law (e.g., e‑invoicing formats or retention requirements).
• Improve the Service (analytics, debugging, product decisions).
• Communicate with you (service notices, security alerts, support).
• Marketing with consent (you can opt out at any time).

Where required by law, our legal bases include performance of a contract, legitimate interests, consent, and compliance with legal obligations.

4. Free Invoice Service retention

For invoices created via the public, no‑account Free Invoice Service, we store generated invoices for up to 30 days and then auto‑delete them. Links to such invoices may stop working after deletion.

For signed‑in/paid plans, retention follows your workspace settings or any applicable legal obligations. You can also request early deletion (see Section 9).

5. Sharing & transfers

We share data only with:

• Service providers/sub‑processors (cloud hosting, email, databases, analytics, payments, logging, CDN). They may process data outside KSA subject to contracts and safeguards.
• Legal compliance (e.g., lawful requests, fraud, security, protecting our rights or users).
• Business transfers (merger, acquisition). We will notify you if ownership changes.

We do not sell your personal information.

6. Security

We use industry‑standard protections (encryption in transit, hardened infrastructure, access controls). No system is 100% secure; please keep your passwords and API keys safe and use two‑factor authentication if available.

7. Your rights & choices

Depending on your region, you may have rights to access, correct, delete, export, or object/restrict processing. We honor reasonable requests after verifying your identity.

• Email: support@hala-invoice.com
• Cookies: you can adjust browser settings or use built‑in opt‑outs for analytics where offered.
• Marketing: opt out from the link in our emails.

For Customer Data you control (invoice contents), we will route requests to your administrator if applicable.

8. International transfers

If we transfer data outside your country, we use contractual protections and technical safeguards. Use of the Service may involve processing in regions other than KSA.

9. Data retention & deletion

• Account data: kept while your account is active and as needed for legal/accounting purposes.
• Customer Data: kept per your settings or the Free Service policy above.
• You can request deletion at any time; some logs/archives may persist for limited periods for security or legal reasons.

10. Children

The Service is not intended for children under 13 (or the age required in your region). Do not submit children's data without a lawful basis.

11. Changes to this policy

We may update this policy. We'll post the new version with a new "Last updated" date and, for material changes, notify you by email or in‑app.

12. Contact

Questions or requests: support@hala-invoice.com.

Postal address available upon request.