Create invoice

Privacy Policy

Last Updated: October 8, 2026

Introduction

This Privacy Policy (“Policy”) of GENIO GROUP, INC (“Invoxa,” “our,” “we” or “us”) is designed to help you understand how we collect, use, disclose, and process your personal information when you use our website invoxa.com, our web app at app.invoxa.com, our mobile apps for iOS and Android, and our invoicing services (collectively, the “Services”). By accessing or using our Services, you agree to the terms of this Privacy Policy.

Information We Collect

We collect the following types of information:

  1. Contact Data: Name, email address, phone number, physical address.
  2. Profile Data: Business name, industry information, username, password.
  3. Invoice Data: Information included in invoices, such as items sold, prices, client details.
  4. Payment Data: We do not collect or store payment card numbers or bank account details used to make payments through the Services. Subscriptions are paid through Stripe on our website, through Apple in the Invoxa iOS app, or through Google Play in the Invoxa Android app, and we learn the status of App Store and Google Play subscriptions from Apple and Google through RevenueCat. Payments of your invoices by your clients are accepted by Stripe on your own Stripe account. We receive only information about these payments, such as their status, amount, currency, and identifiers. If you add payment instructions to your documents (for example, your bank details for your clients), we store them as part of your Invoice Data.
  5. Usage Data: IP address, browser or device type, operating system, pages and app screens visited, actions in the web app and mobile apps, time spent, and error and crash reports.
  6. Device Data: Device type, unique device identifiers, and push notification tokens of the devices on which you allow notifications.

How We Collect Information

We collect information in the following ways:

  1. Information you provide directly to us when using our Services.
  2. Information we collect automatically when you use our Services.
  3. Information we receive from third parties, such as business partners or marketing agencies.

Cookies

We and our service providers use cookies and similar technologies, such as local storage, on our website and in our web app. Our Cookies Policy explains what we store in your browser, why, and how you can control it.

Use of Information

We use your information for the following purposes:

  1. To provide and maintain our Services.
  2. To process payments and send invoices.
  3. To communicate with you about our Services.
  4. To improve and personalize our Services.
  5. To comply with legal obligations.
  6. For marketing and promotional purposes, with your consent.

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases to process your personal information:

  1. Performance of a contract: to create and maintain your Account, provide the Services you use, process your Subscription, and send the documents and emails you ask us to send.
  2. Legitimate interests: to keep the Services secure and protect them against spam and abuse; to understand how the Services are used so that we can fix and improve them, through product analytics, error and crash reports and session recordings in our web app and mobile apps, and page view counts without cookies on our website; and to answer your support requests. You can object to this processing at any time (see “Your Rights and Choices”).
  3. Consent: for analytics cookies on our website, which you can withdraw at any time with Cookie settings in the footer of the website, and for marketing communications.
  4. Legal obligations: to keep the records that tax and accounting laws require and to respond to lawful requests from authorities.

Information about your clients that you add to the Services, such as their names, contact details and the documents you send them, is processed on your behalf to provide the Services to you.

Sharing of Information

We may share your information with:

  1. Service providers who assist us in delivering our Services, each for the purposes listed:
    • Stripe: payment processing for Subscriptions purchased on our website, and for invoice payments that you accept from your clients through your own Stripe account;
    • Apple: distribution of our iOS app through the App Store, in-app Subscription purchases, Sign in with Apple, and address suggestions in our iOS app (Apple Maps);
    • Google: distribution of our Android app through Google Play and in-app Subscription purchases (Google Play Billing), Firebase Cloud Messaging (delivery of push notifications to Android devices), Sign in with Google, Google Workspace for our support email, reCAPTCHA (protection against spam and abuse when you sign up or send documents), and address suggestions in our web app (Google Maps Platform);
    • RevenueCat: the status and purchase history of Subscriptions purchased in our mobile apps, linked to your Invoxa account ID, together with your email address, your name (or your company name), your company’s country and whether you use iOS or Android, so that we can find your purchases when you contact support;
    • PostHog: product analytics, error and crash reports, and session recordings in our web app and mobile apps. In the mobile apps, recordings are made for a sample of sessions and hide all text, images and embedded web pages;
    • Expo (650 Industries, Inc.): delivery of push notifications to our mobile apps. The text of a notification (for example, which client viewed which document) passes through Expo and Apple Push Notification service or Firebase Cloud Messaging;
    • Resend: sending emails, such as account emails and the documents you send to your clients;
    • Cloudflare: content delivery, protection of our Services against attacks and abuse, and storage of files you upload, such as logos and signatures (Cloudflare R2);
    • OVHcloud: hosting of our servers and databases;
    • Anthropic: reading the invoices, estimates and receipts you upload to import them into your account (Settings, Import documents), and drafting a document from the sentence you type or dictate (Describe it). The file or text is sent to Anthropic’s Claude model together with the names of your clients and items so the draft can match them; Anthropic does not use it to train its models and retains it for no longer than its API data retention period. Speech is recognised on your device or by your browser, not by Anthropic.
  2. Business partners for joint marketing efforts or promotions.
  3. Legal authorities when required by law or to protect our rights.
  4. In the event of a business transaction, such as a merger or acquisition.

Data Security

We implement industry-standard security measures to protect your information. However, no method of transmission over the Internet or electronic storage is 100% secure.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including:

  1. The right to access your personal information.
  2. The right to correct inaccurate information.
  3. The right to delete your information.
  4. The right to object to certain processing activities.
  5. The right to withdraw your consent at any time where we rely on it, for example for analytics cookies on our website or for marketing communications.
  6. The right to receive your information in a portable format.

If you are in the European Economic Area, the United Kingdom or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

You can delete your account and its data at any time in the mobile app (More > Delete account), in the web app at app.invoxa.com (Settings > Profile > Delete account), or by contacting us at support@invoxa.com. See How to delete your Invoxa account.

To exercise these rights, please contact us using the information provided in the “Contact Us” section.

Data Retention

We retain your personal information for as long as necessary to provide our Services and comply with legal obligations. When we no longer need the information, we will securely delete or anonymize it.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We will take appropriate measures to protect your information in accordance with this Privacy Policy and applicable law.

Children’s Privacy

Our Services are not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the “Last Updated” date.

Contact Us

If you have any questions about this Privacy Policy or our practices, please contact us at:

GENIO GROUP, INC

Email: support@invoxa.com