Privacy Policy

1. Who we are

Elixir Invoicing ("Elixir Invoicing", "we", "us") is operated by Elixir Construction Ltd., a company based in Richmond, British Columbia, Canada. This policy explains what information the Elixir Invoicing app and website collect, why, and the choices you have. It is written in plain language on purpose.

You can reach us through the Help & Support section inside the app (in the side menu, above Settings).

2. What we collect

Account information. When you create an account we collect your name, your company name, your trade, the plan you choose, and your email address. Your password is stored in hashed form by our authentication provider — we never see it and never store it in plain text.

Your business data. The content you enter into the app: invoices, estimates, clients, products and services, expenses, jobs, photos and receipts, and your business settings. This data exists so the app can do its job for you — nothing else.

Technical information. The minimum needed to run and secure the service, such as device and browser type, app version, and sign-in timestamps. You can also use the app in local (offline) mode, in which case your business data stays on your device only.

3. How we use it

• To operate the app: save, sync, display and back up your business data for your account.
• To provide features you choose to use, such as sending an invoice by email or scanning a receipt.
• To keep accounts secure and prevent abuse.
• To answer you when you contact support.
• To meet legal obligations that apply to us.

4. What we never do

• We never sell your personal information or your business data — to anyone, for any reason.
• We never show ads, and we never include advertising trackers in the app.
• We never read your invoices or client lists for marketing.
• We never share your data with third parties except the service providers described in Section 6, and only so the app works.

5. Where your data is stored, and how it is separated

Cloud data is stored in Canada, in the Canada (Central) region of our database provider. Each account's data is kept in its own isolated record, protected by row-level security: your sign-in can only ever access your own account's data — not anyone else's. A copy of your data also lives on your device so the app works offline.

6. Service providers we rely on

• Supabase — account authentication and cloud database (stored in Canada).
• Cloudflare — hosting and delivery of the app and website.
• Resend — used only when you tap "Send by email" on an invoice or estimate, to deliver that email with its PDF attached.
• Anthropic — powers the optional in-app support assistant. When you chat with the assistant, your chat messages are processed to generate a reply. The assistant cannot see your account or your business data.
• Stripe — only if you choose to add your own Stripe payment link in Settings. Payments go between you, your client and your own Stripe account; we never receive or store card numbers.
• Google Play — if you subscribe through the app store, Google processes the payment under Google's own privacy policy.

Receipt scanning (OCR) runs entirely on your device. Receipt images are not uploaded for scanning.

7. Email we send

We send email in three situations only: account emails (such as password resets), documents you choose to send to your clients from inside the app, and replies to support requests you start. We do not send marketing email blasts.

8. Your rights and choices

• Access and correction: your data is visible and editable inside the app at any time.
• Full export (Gold plan): Settings → Backup & Restore downloads a complete copy of your business data whenever you like.
• Deletion: you can delete your account and its data yourself, instantly, at any time — Settings → Account → Delete account. See our account deletion page for exactly what is removed.
• Complaints: if you believe we have mishandled your information, contact us first and we will work to fix it. In Canada you may also contact the Office of the Privacy Commissioner of Canada. Our handling of personal information follows Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

9. If you are in the United States

We welcome US users. Please know that your data is stored in Canada even if you are located in the United States. We do not sell personal information under any definition — including the California Consumer Privacy Act (CCPA/CPRA). California residents have the right to know what personal information we hold about them and to request its deletion, as described in Section 8; we honor those requests from users in any state. You will never be discriminated against for exercising a privacy right. If a problem cannot be resolved with us, you may also raise it with your state Attorney General's consumer protection office.

10. How long we keep data

We keep your account data while your account is active. When you delete your account in the app, your data is removed immediately, except for the limited records we are legally required to retain (for example, tax and transaction records relating to subscriptions), which we keep only as long as the law requires — and in all cases no longer than 30 days for anything deletable — and then delete.

11. Security

All connections to the app use encrypted HTTPS/TLS. Passwords are hashed by our authentication provider, account data is isolated per account, and access to production systems is limited to the people who operate the service. No system is perfectly secure, but we take reasonable, industry-standard measures — and if a breach ever affects your information, we will notify you as required by applicable law.

12. Children

Elixir Invoicing is a business tool intended for adults (18+). We do not knowingly collect information from children.

13. Changes to this policy

If we change this policy in a way that matters, we will announce it inside the app and update the date at the top of this page before the change takes effect. Continued use of the app after a change means you accept the updated policy.

14. Questions? Talk to a human

Open Help & Support inside the app (in the side menu, above Settings) and message the support assistant — a person, not a script, will get back to you within one business day.