Privacy Policy

1. Who we are

Zenvoicer is published by WERO Lab. This policy explains what personal data we collect when you use our application and website (zenvoicer.io), why we collect it, and how you can exercise your rights.

2. Data we collect

• Account data: email address, password (encrypted via Supabase Auth), company name, logo.
• Business data: your clients (name, email, phone) and your invoices (amounts, due dates, statuses).
• Payment data: for your own Zenvoicer subscription, billing is handled by our Merchant of Record provider (Lemon Squeezy / Polar), which processes your payment data — we never store your card number.
• Third-party API keys: if you configure a payment provider API key (Stripe, PayPal, Lemon Squeezy, Polar...), it is stored encrypted and used solely to generate your payment links.
• Technical data: IP address, device type, connection logs, push-notification identifiers (if enabled).

3. Why we use it

• Provide and improve the Service (invoice management, automated reminders, statistics).
• Send reminder emails on the user's behalf through our email delivery provider (Resend).
• Ensure the security of the Service and prevent fraud.
• Manage the billing of your Zenvoicer subscription.
• Contact you about your account or important information related to the Service.

4. Data sharing

We never sell your personal data. We only share it with the providers necessary for the Service to operate: hosting (Vercel), database and authentication (Supabase), email delivery (Resend), billing of your subscription (Lemon Squeezy / Polar), and — if you consent by configuring your own keys — your clients' payment providers (Stripe, PayPal, etc.). Each of these providers is bound by its own privacy commitments.

5. Data retention

Your data is kept for as long as your account is active. If you delete your account, your personal data and your clients' data are deleted or anonymized within a reasonable timeframe, unless a longer legal retention obligation applies (e.g. accounting requirements).

6. Security

We implement reasonable technical and organizational measures (encryption of passwords and API keys, HTTPS connections, restricted database access) to protect your data against unauthorized access, alteration, disclosure, or destruction.

7. Your rights

In accordance with applicable data-protection regulations (notably GDPR for European users), you have the right to access, rectify, delete, restrict, and port your data, as well as a right to object. You can exercise these rights by contacting us at contact@zenvoicer.io or directly from your account settings (account deletion).

8. Cookies and trackers

Our site uses a minimal number of technical cookies necessary for the site to function and, where applicable, privacy-respecting audience-measurement tools. No data is used for targeted advertising.

9. International transfers

Some of our providers (hosting, email, payment) may process data outside your country of residence. When this is the case, we ensure that appropriate safeguards are in place in accordance with applicable regulations.

10. Changes to this policy

We may update this privacy policy to reflect legal or functional changes. The last-updated date appears at the top of this page. In the event of a substantial change, we will notify you via the application.

11. Contact

For any question regarding this policy or your personal data, contact us at contact@zenvoicer.io