Privacy Policy

Last updated: 14 June 2026

Who we are

Tradeinvoicer is a billing administration service for UK tradespeople, operated by Tradeinvoicer Ltd (company number 17234014), registered in England and Wales. Registered office: 82A James Carter Road, Mildenhall, IP28 7DE. Contact: hello@tradeinvoicer.co.uk

What data we hold

We hold two categories of data:

Account data (your business)

  • Business name
  • Hashed PIN (not recoverable in plain text)

Client data (your customers)

  • Client name
  • Phone number (optional)
  • Address (optional)
  • Invoice and estimate records (line items, totals, dates, status)
  • Digital signatures (stored as image data against an invoice)

Importing contacts from Google or Microsoft

If you choose to use “Import from Google Contacts” or “Import from Outlook / Microsoft” on the Clients page, you will be asked to sign in to your Google or Microsoft account and grant Tradeinvoicer read-only access to your contacts.

  • We request only read-only access to your contacts (Google: contacts.readonly; Microsoft: Contacts.Read). We cannot edit, delete, or create contacts in your Google or Microsoft account.
  • We retrieve each contact's name, phone number, and address. No other contact data (e.g. email addresses, photos, notes) is accessed or stored.
  • You choose which contacts to import before anything is saved. Nothing is added to your client list automatically.
  • Contacts you choose to import are stored as client records in our database (see “Client data” above) and are subject to the same retention and deletion rules as any other client data.
  • The access token used to read your contacts is stored encrypted in your session and is not shared with any third party other than Google or Microsoft themselves (to make the API request).
  • You can revoke this access at any time via your Google Account's “Third-party access” settings or your Microsoft account's “App access” settings.

Why we hold it

We hold this data solely to provide the invoicing service you have contracted us to operate. We do not use it for marketing, profiling, or any purpose beyond delivering the service.

Where data is stored

All data is stored in a PostgreSQL database hosted on Neon (AWS EU West 2, London, United Kingdom). The application is hosted on Vercel (European region where available). Data does not leave the UK or EU.

How long we keep it

We retain your data for as long as your account is active. When you close your account, we delete all associated data within 30 days.

Your rights

Under UK GDPR you have the right to:

  • Access the data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (right to erasure)
  • Export your data in a portable format

To exercise any of these rights, email hello@tradeinvoicer.co.uk. We will respond within 30 days.

Third parties and sub-processors

We do not sell or share your data for marketing or advertising purposes. The following service providers process data on our behalf as data processors, under contractual obligations consistent with UK GDPR:

  • Neon:database hosting (AWS EU West 2, London). Stores all account and invoice data.
  • Vercel:application hosting (European region). Processes requests and serves the application.
  • Resend:transactional email. Processes email addresses to deliver account, trial, and notification emails.
  • Stripe:payment processing. Processes payment card data and subscription billing. Stripe operates under its own privacy policy and PCI DSS compliance.
  • Cloudflare R2:logo and asset storage. Stores business logos uploaded via Settings.
  • Google Analytics (GA4):usage analytics. Collects anonymised usage data including pages visited and features used. An anonymised account identifier is sent to GA4 to enable cross-device session analysis. GA4 may set cookies on your device (see Cookies section below).
  • Google Contacts (People API):if you choose to use “Import from Google Contacts”, Google processes our request to retrieve your contacts on our behalf. See “Importing contacts from Google or Microsoft” above. Governed by Google's privacy policy.
  • Microsoft Graph (Outlook Contacts):if you choose to use “Import from Outlook / Microsoft”, Microsoft processes our request to retrieve your contacts on our behalf. See “Importing contacts from Google or Microsoft” above. Governed by Microsoft's privacy policy.

Cookies

We use the following cookies:

  • Session cookie (invoicer-session):keeps you logged in. Contains only an encrypted session identifier. No personal data is stored in plain text.
  • Analytics cookies (_ga, _ga_*):set by Google Analytics 4. Used to distinguish users and measure usage. These are analytics cookies, not advertising cookies. Where a cookie consent banner is shown, these are only set after you accept analytics cookies, and you can change your choice at any time via the cookie preferences link. Otherwise, you can opt out via your browser settings or a browser-level analytics opt-out.

ICO registration

Tradeinvoicer Ltd is registered with the Information Commissioner's Office (ICO) as required under UK GDPR. Registration number: C1945010.

Contact

For any privacy-related queries: hello@tradeinvoicer.co.uk