Privacy

Who holds your data

EZ PO Invoice is provided by Ziggy Meilus, a sole proprietor in Florida, USA, 7901 4th Street North, Suite 103, St. Petersburg, FL 33702, USA. For anything on this page, including a request to see or delete what is held about you, write to support@ezpoinvoice.com.

What is stored, and why

The app exists to make quotes, invoices and purchase orders, so most of what it holds is the content of those documents and the details needed to produce them.

• Your account. Your name and email address, held by our sign-in provider. We never see or store your password.
• Your business profile. Trading name, addresses, phone, website, logo, and the tax and payment details that print on a document — including, if you enter them, your tax ID and bank account.
• Your contacts. The customers and suppliers you enter: company name, contact name, email, phone, addresses.
• Your documents. Quotes, invoices, purchase orders and commercial invoices, their line items, totals and dates, and a log of what happened to each one — when it was sent, to whom, and when the recipient first opened it.
• Billing. Which plan you are on and its status. Card details are handled by Stripe and never reach us.
• Error reports. When something fails, the error message and where it happened, with email addresses and long numbers removed, so that it can be fixed. How many documents you have had read and how many people you have emailed today are also counted, to keep a daily limit on both.

There is no analytics, no advertising and no tracking in this product. Nothing here is sold, and nothing is used to profile you or build an audience.

Your customers’ and suppliers’ data

The contact details you enter belong to other people. For that data you are the controller and we are your processor: we hold it to run the service for you, act on your instructions, and do nothing else with it. You are responsible for having a basis to enter it in the first place.

Why we are allowed to hold it

• To perform our contract with you — storing and rendering your documents, sending the ones you ask us to send, taking payment for the plan.
• Our legitimate interests — keeping the service secure and working, and preventing abuse. Weighed against your interests, and limited to what that needs.
• A legal obligation — our own tax and accounting records of what you paid us.
• Your consent — browser notifications, which are off until you turn them on and can be turned off at any time.

Who else sees it

These are the only companies your data reaches, each for one job, and none of them may use it for anything else.

Several of these are in the United States, so using the service involves transferring your data there. Those transfers rely on the European Commission’s standard contractual clauses, or on the provider’s certification under the EU–US Data Privacy Framework where it has one.

We will also hand over data where the law requires it, and we will tell you when we are allowed to.

Documents you share by link

When you email a document, it carries a link to an online copy. Anyone holding that link can read that one document, and nothing else — there is no sign-in on it, because the recipient is usually not a user. The link contains a long random token that cannot be guessed, and it opens one document in read-only form. Treat it the way you would treat the emailed PDF itself.

How it is protected

• Everything travels over an encrypted connection and is encrypted at rest.
• Your tax ID and bank account details are separately encrypted in the database with a key the database does not hold, and are never sent back to your browser in full — the settings page shows you only the last few digits.
• Every query is scoped to the business you are signed in to, so one account cannot reach another’s documents.

How long it is kept

Your documents stay until you delete them — an invoice from three years ago is a record you may need, and expiring it for you would be the wrong default. Delete your account and we delete your data within 30 days, apart from the billing records we are legally required to keep. A lapsed subscription is not a deletion: everything you made stays readable, printable and exportable. Error reports are deleted after 90 days, and the daily counts after 30.

Cookies

Two, both necessary: one that keeps you signed in, and one that remembers which of your businesses you are working in. No advertising or analytics cookies, so there is no consent banner to click through.

Your rights

If you are in the UK or the EU you can ask us for a copy of your data, to correct it, to delete it, to receive it in a portable form, to restrict what we do with it, or to object to it. Write to support@ezpoinvoice.com and we will answer within one month. You can also complain to your national data protection authority, though we would rather you told us first so we can put it right.

Changes

If this page changes in a way that matters, we will tell account holders by email rather than quietly changing the date at the top.