Privacy

What we collect, and why

Plain English, no legalese we don’t need. Last updated 9 September 2026.

If you got an email from us

If you received a cold email from Dinkum Invoice, your business’s contact details (name, trade, suburb, and an email address) were sourced from your business’s own public listing, such as Google Maps or your website. We didn’t buy a consumer list and we don’t hold any personal data about you beyond what your business has already published. The email is a one-off, relevant to your trade, and every message includes a working unsubscribe link.

Don’t want to hear from us again? Click unsubscribe in the email, reply and say so, or email hello@dinkuminvoice.com.au and we’ll remove you within 5 business days. We won’t email that address again.

If you’re using the site or tools

Using the free invoice generator or downloading a template doesn’t require an account and doesn’t send us your invoice data — the PDF is built in your browser. If you sign in and choose to save a PDF or image to My files, that file is uploaded through our backend to private Cloudflare R2 storage.

When you start creating an account, we collect your email address and, optionally, the invoicing tool you told us you’re currently using. We use it to send your sign-in link and a short onboarding sequence about Dinkum Invoice. You can unsubscribe from marketing emails at any time via the link in any email.

We use standard analytics (PostHog, Google Analytics) to see which pages and tools people use, so we know what’s worth building next. This is aggregate usage data, not anything identifying, unless you’ve given us your email through an account signup form.

Using the mobile app

Guest invoice drafts and selected business logos are processed on your device. PDFs are generated on the device. When signed in, you can choose Save PDF and logo to My files to upload them to private Cloudflare R2 storage, or upload images from My files. Cloud files are available to your account on the website and app; they are not publicly accessible. Otherwise, PDFs are shared only through the destination you choose. Saved account business details, customers and services are sent to our backend and stored with your account. Saved business details may include contact information and bank details you choose to put on invoices.

Mobile subscriptions use Apple or Google payment processing and RevenueCat to verify purchases and access. RevenueCat receives your account identifier and purchase information; we do not receive your store account password or card details. Website subscriptions use Stripe. The mobile app does not include the website analytics SDKs; our hosting and authentication providers may process operational request and security logs.

Deleting your account and data

Use Your account → Delete account in the app, or our account deletion page. This removes cloud files from R2, the account, saved details, cloud invoices, linked tool history and signup data. Export records first. Copies of PDFs you already shared remain where they were saved. A non-reversible account fingerprint is retained to prevent in-flight uploads from recreating deleted files. Store subscriptions must be cancelled separately; payment providers may retain their transaction records.

We retain a non-reversible fingerprint of a deleted billing identifier to prevent delayed billing events recreating deleted data. Backup copies and provider operational logs may remain until their retention cycles expire; contact us for information about a specific deletion request.

Who else sees it

We use a small number of service providers to run the site and send email, and we don’t sell or rent your details to anyone else:

  • Resend — sends onboarding emails and cold outreach emails
  • Supabase — stores account, signup and saved workspace data
  • RevenueCat, Apple and Google — mobile subscription processing and verification
  • Stripe — website subscription billing
  • PostHog and Google Analytics — aggregate product and site analytics
  • Vercel — hosts the site

Questions

Email hello@dinkuminvoice.com.au for anything not covered here, including a request to see or delete what we hold about you. This page describes our current practice, not legal advice.