Create invoice

Cookies Policy

Last updated: October 8, 2026

This policy covers the Invoxa website at www.invoxa.com and the Invoxa web app at app.invoxa.com, both run by GENIO GROUP, INC (“Invoxa”, “we”). Most of this page is about the website; the web app is covered in The Invoxa web app. How the Invoxa mobile apps collect and use data is described in our Privacy Policy.

Short version

  • The website uses one analytics tool, PostHog, and only sets its cookie if you click Accept in the cookie banner.
  • Until you choose, PostHog stores nothing in your browser. It may only count the page view without cookies, in the same way as when you decline (see What happens when you decline).
  • We do not use advertising cookies, Google Analytics, social media pixels or other third-party trackers on this website.
  • You can change your choice at any time with Cookie settings in the footer of every page, or with the button below.
  • The web app works differently: it uses sign-in cookies and PostHog analytics without a cookie banner. See The Invoxa web app.

Your current choice in this browser: Not chosen yet

What cookies and browser storage are

Cookies are small text files a website saves in your browser. Browsers also offer “local storage” and “session storage”, which work in a similar way but are not sent to the server with every request. This policy covers all three.

What we store and why

Name Type Set by Purpose How long
invoxa_consent Local storage on www.invoxa.com Invoxa Remembers whether you accepted or declined analytics, so we do not ask on every page. Strictly necessary. 6 months, then the banner asks again
__ph_opt_in_out_… Local storage on www.invoxa.com PostHog PostHog’s own record of your choice. Strictly necessary. Until you clear your browser data
ph_…_posthog, ph_…_posthog_cpm Cookies on .invoxa.com; ph_…_posthog also in local storage PostHog, only after you accept A random anonymous ID and a session ID, plus the page, referrer and campaign (UTM) parameters of your first visit. Cookie: 365 days. Local storage: until you clear it or decline
ph_… (session) Session storage PostHog, only after you accept Tells browser tabs apart within one visit. Until you close the tab

The … stands for our PostHog project key.

The cookie is shared by www.invoxa.com and app.invoxa.com. If you accept on the website and later sign up in the web app, both use the same anonymous ID. That lets us see which pages and buttons on the website lead people to create an account, which is the main thing we want to learn.

What PostHog records when you accept

  • pages you view, when you leave them, and how you arrived (referrer, UTM campaign parameters);
  • clicks on links and buttons, such as sign-up, “Create invoice”, App Store and template download buttons (PostHog records which element was clicked and its label);
  • where on a page you click and how far you scroll (heatmaps), how fast pages load, and errors in the website’s scripts;
  • technical details sent by every browser: IP address, browser, operating system, device type and screen size. PostHog can use the IP address to estimate your country and city.

We do not record your screen (session replay is turned off on this website).

We use this to improve the website. We do not sell it or use it for advertising. PostHog processes it for us on servers in the United States (us.i.posthog.com). See PostHog’s privacy policy.

What happens when you decline

PostHog does not set its cookie and does not keep an ID in your browser. We delete any PostHog cookie and storage left from an earlier “Accept”.

PostHog may still count the page view without cookies. To do that, PostHog’s servers compute a hash from our project, a random value that changes every day, your IP address, your browser’s user agent and the website address. This hash cannot recognise you on another day, and nothing is stored on your device. We count these page views on the basis of our legitimate interest in knowing how many people visit the website and which pages they open (see Legal Bases for Processing in our Privacy Policy).

  1. Click Cookie settings in the footer of any page, or the button at the top of this policy.
  2. Choose Decline to withdraw consent or Accept to give it. The change applies at once.

You can also delete cookies and site data in your browser settings:

The banner asks you again 6 months after your last choice, or on your next visit if you clear your browser data.

The Invoxa web app

The web app at app.invoxa.com, including the pages where your clients view the documents you send them, stores the following in your browser. The web app does not show a cookie banner, and your choice in the website’s banner applies to the website only.

Name Type Set by Purpose How long
access-token, refresh-token, user_id Cookies on app.invoxa.com Invoxa Keep you signed in. Strictly necessary. Until you sign out or your browser ends the session
ph_…_posthog Cookie on .invoxa.com, also in local storage PostHog A random ID and a session ID for product analytics. When you sign in, PostHog links them to your Invoxa account. Cookie: 365 days. Local storage: until you clear your browser data
ph_…, invoxa_ph_… Session storage and local storage PostHog, Invoxa Keep the analytics of one visit together and record sign-out correctly. Until you close the tab or clear your browser data

In the web app, PostHog records pages you open, clicks and other actions, your IP address and technical details of your browser and device, and, for a sample of visits, a recording of how you use its pages (session replay). Pages where your clients view the documents and payment receipts you send them are not recorded. We use this to find problems and improve the web app. PostHog processes this data for us on servers in the United States.

Because the PostHog cookie is on .invoxa.com, your browser also sends it to www.invoxa.com. The website uses it only if you accept analytics there, and choosing Decline on the website deletes it.

The web app also loads Google reCAPTCHA (on the sign-up form and when you send a document) and Google Maps (for address suggestions). Google may set or read its own cookies when they load; see Google’s privacy policy. Signing in with Google or Apple and paying an invoice through Stripe take place on those companies’ own pages, under their own cookie and privacy policies.

To remove what the web app stores, sign out and delete cookies and site data for invoxa.com in your browser settings (see the links above).

Changes and contact

If we add a tool that stores data in your browser, we will update this page and ask for your consent again where it is required. Questions: support@invoxa.com.