Privacy Policy

Last updated: July 21, 2026

Gavrilo Invoice LLC ("we," "our," or "us") operates the Gavrilo Invoice web application (gavrilo.web.id). This Privacy Policy explains how we collect, use, and protect your information when you use our service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name and email address. Your password is hashed using bcrypt before storage — we never store your password in plaintext.

1.2 Invoice Data

When you create invoices, we store the invoice details you provide: line items, amounts, tax rates, discounts, dates, and client information. This data belongs to you and is used solely to provide the invoicing service.

1.3 Client Data

We store the client information you choose to save: names, email addresses, and any other details you provide. This data is accessible only within your account.

1.4 Usage Data

We may collect basic usage information such as the number of invoices created, feature interactions, and error logs. This is used to improve the service and diagnose technical issues. We do not use analytics or tracking scripts on our application.

2. How We Use Your Information

We use your information for the following purposes:

• To provide the service — creating, storing, and delivering your invoices and client data.
• To send transactional emails — account verification, password resets, invoice delivery confirmations, and payment reminders. These are essential to the service.
• To improve the product — understanding how the service is used helps us fix bugs and prioritize features.
• To comply with legal obligations — we may process your data as required by applicable law.

3. Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated data — invoices, clients, and account information — is permanently removed from our active systems. Data in automated backups is cleared within 30 days of account deletion.

4. Data Security

We take the security of your data seriously:

• All data in transit is encrypted with HTTPS (TLS). Data at rest is stored with industry-standard encryption on our database servers.
• Passwords are hashed with bcrypt (12 rounds) and are never stored in plaintext.
• Database access is restricted to authorized systems and personnel through strict access controls.
• We perform regular backups to prevent data loss and maintain service continuity.

5. Your Rights

You have the following rights regarding your data:

• Access — you can view your account details, invoices, and clients at any time from your dashboard.
• Correct — you can update your account information and edit or delete invoices and clients.
• Delete — you can delete individual invoices and clients, or delete your entire account from Settings → Delete Account.
• Manage email preferences — you can choose which emails you receive in Account Settings → Communication Preferences.

6. Cookies

We use a single session cookie ("token") to keep you authenticated while using the service. This cookie is essential for the application to function. We do not use analytics cookies, advertising cookies, or any form of tracking cookies. See our Cookie Policy for more details.

7. Third-Party Services

We use the following third-party services to operate Gavrilo Invoice:

• Amazon Web Services (AWS) — for infrastructure hosting and Amazon SES for email delivery. When you send an invoice via email, your invoice content passes through AWS SES for delivery.

We do not sell, rent, or trade your data with any third parties. We do not share your information with advertisers or data brokers.

8. Children's Privacy

Gavrilo Invoice is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

9. Account Deletion

You can delete your account at any time by going to Settings → Delete Account. You will be asked to confirm your password, and then receive a confirmation email with a deletion link. Once confirmed, your account and all associated data will be permanently removed.

10. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at support@gavrilo.web.id.

Gavrilo Invoice LLC
678 Haul Road
Minneapolis, MN 55401
USA