Next InvoiceNext Invoice
FeaturesAboutBlogContact
LoginGet started
Legal

Privacy Policy

How we collect, use, and protect your information. Last updated: 1 March 2026.

1. Introduction

Next Invoice ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our invoicing platform at app.nextinvoice.co.uk.

2. Information We Collect

We collect information you provide directly:

  • Account information (email address, name)
  • Business details (business name, address, VAT number, banking details)
  • Client information (names, addresses, contact details)
  • Invoice data (line items, amounts, notes, terms)
  • Preferences (theme, font, currency, language, date format)

3. How We Protect Your Data

All sensitive data - including invoice details, business information, and client details - is encrypted at rest using AES-256-GCM encryption. Encryption and decryption occur server-side only. The master encryption key is stored as an environment variable and is never exposed to client-side code.

4. How We Use Your Information

We use your information to:

  • Provide and maintain the invoicing service
  • Generate invoices and PDF documents
  • Authenticate your account and protect your sessions
  • Store your preferences (theme, font, regional settings)
  • Improve the platform based on usage patterns

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We do not share your data with third parties except as required by law or to provide the core service (e.g., authentication via Supabase Auth).

6. Cookies

We use essential cookies for authentication session management and to store your preferences (theme, font selection, and regional settings). These cookies have a 1-year TTL and contain no personally identifiable information. For more details, see our Cookie Policy.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Export your data
  • Withdraw consent at any time

8. Contact

For privacy-related enquiries, contact us at [email protected].