Privacy

What happens to your invoices

PlainPaid runs entirely in your web browser. Your invoices, clients, logo and business details are saved in your browser's local storage on your device. Unless you turn on cloud backup, they are not sent to us or to anyone else, and we cannot see them.

PDFs are created in your browser too. When you send an invoice to a client, you send the PDF yourself, by email or however you like.

Cloud backup (optional)

Cloud backup is off until you turn it on in My invoices. When it is on, your browser makes a random backup key, encrypts your invoices and business details with it (AES-256), and uploads only the encrypted result to our Cloudflare database. The key never leaves your device: we cannot read your backup, and we cannot recover it if you lose the key.

• What we store: the encrypted backup, its size and when it last changed. No name, email or password.
• To stop the free service being flooded, we count how many new backups each connection creates per day, using a scrambled (hashed) form of the IP address and the date. Those counts are deleted the next day.
• Turn off cloud backup and choose to delete the online copy, and it is deleted at once. Backups not updated for two years are deleted automatically.
• Anyone who has your backup key can open your backup. Keep it as private as a password.

Pro licences

If you buy Pro, Stripe and Link (the merchant of record) handle the payment and your billing details under their own privacy policies. Our server keeps only what it needs to run your licence: the licence key, the Stripe subscription it belongs to, whether it is active and until when, and the email address you paid with (so we can help if you lose the key). The key is also kept in your browser, and in your encrypted cloud backup if you use one.

What this means for you

• Clearing your browser data deletes your saved invoices. Turn on cloud backup, or use Back up to file in My invoices, to keep a copy.
• Invoices saved on one device or browser do not appear on another unless you use cloud backup with the same key, or move a backup file.
• Anyone who uses this browser profile can open your saved invoices.

Who is responsible

PlainPaid is made by Mano Studio (operated by Long Chen), Denmark, who is responsible for the data described here and answers questions at [email protected].

What the website itself receives

Like any website, the server that delivers these pages (Cloudflare) handles standard request information such as your IP address in order to send you the page and the backup. We set no cookies, use no advertising trackers, and do not load fonts or scripts from third parties.

Questions: [email protected]