Privacy Policy

Account information: when you sign in with Google, we receive your name, email address, and profile picture. When you sign up with email and password, we collect your email and an encrypted password hash.

Business information: the legal name, address, tax IDs (GSTIN / TRN / VAT / Sales Tax ID), logo, and bank details you enter for your business profile.

Customer & invoice data: the customer contacts, products, line items, invoices, and supporting metadata you create within the Service.

Usage data: standard log information such as IP address, browser type, pages visited and timestamps, used for security and analytics.

We use the information to provide the Service, generate your invoices, process payments for the Advanced plan, communicate important account and transactional messages, and improve the Service's reliability and security.

We do not sell your personal data to third parties.

Your data is stored on our managed backend infrastructure (Supabase), which uses encryption in transit and at rest. Uploaded logos are stored in a private storage bucket scoped to your account.

We use essential cookies and browser local storage to keep you signed in and to remember your interface preferences. We do not use advertising cookies.

We share data with the following processors strictly as necessary to operate the Service:

• Google — for Sign in with Google authentication.
• Stripe — for Advanced plan subscription billing.
• Resend — for sending invoices and transactional emails on your behalf.
• Supabase — for database, authentication and file storage.

Each of these providers operates under its own privacy policy.

We retain your account and business data for as long as your account remains active. Invoices and related records are retained for as long as you keep them in the Service, or as required to meet legal, accounting and tax obligations.

You may access, correct or export your data at any time from your account. You may request deletion of your account and associated data by emailing privacy@ubiquedigitals.com. We will respond within 30 days. Note that some records may be retained to comply with legal obligations.

We use industry-standard safeguards — including TLS encryption, role-based access controls, and row-level security on the database — to protect your information. No system is perfectly secure; please use a strong, unique password and enable additional security where available.

The Service is not intended for individuals under 18. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by email.

For privacy questions or data requests, contact us at privacy@ubiquedigitals.com.