Privacy Policy

1. Introduction

JPO Easy Bill ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our invoicing and billing management application.

By using JPO Easy Bill, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, and company details
• Business Information: Company name, address, tax ID, logo, and contact information
• Customer Data: Customer names, addresses, email addresses, and contact information
• Financial Data: Invoice details, payment records, quotes, and billing information
• Communication Data: Email templates, messages sent through the platform

2.2 Information Collected Automatically

• Usage Data: Features used, pages visited, time spent on the application
• Device Information: Browser type, operating system, IP address
• Log Data: Access times, error logs, and system performance data

2.3 Third-Party Information

If you sign in using Google OAuth, we receive your name, email address, and profile picture from Google.

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our Service
• Process invoices, payments, and quotes as requested
• Send transactional emails (invoices, payment confirmations, quotes)
• Authenticate users and manage accounts
• Improve and optimize our Service
• Respond to customer service requests
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Data Storage and Security

Your data is stored securely using industry-standard practices:

• All data is encrypted in transit using SSL/TLS
• Sensitive data is encrypted at rest
• Access controls and authentication mechanisms protect your account
• Regular security audits and updates
• Data is stored in secure Supabase databases with row-level security

While we implement robust security measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in these circumstances:

• With Your Consent: When you explicitly authorize us to share information
• Service Providers: With trusted third parties who assist in operating our Service (e.g., email delivery services, cloud storage providers)
• Legal Requirements: When required by law, court order, or government request
• Business Protection: To protect our rights, property, or safety, or that of our users
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Portability: Export your data in a machine-readable format
• Opt-out: Unsubscribe from non-essential communications

To exercise these rights, please contact us using the information provided below.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide our services. We may retain certain information for longer periods to:

• Comply with legal obligations
• Resolve disputes
• Enforce our agreements
• Maintain business records as required by law

8. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Maintain user sessions and authentication
• Remember user preferences
• Analyze usage patterns to improve our Service

You can control cookie settings through your browser. Disabling cookies may limit some features of the Service.

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to such transfers.

11. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

We do not sell personal information to third parties.

13. GDPR Compliance

If you are in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to be informed about data collection and use
• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

14. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending an email notification for significant changes

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

For GDPR-related inquiries, EU residents may also contact their local data protection authority.