Know where your data goes — and when.

Backups go to storage you connect

You can connect Google Drive or Dropbox after signing in. Connecting a provider does not upload your workspace by itself.

When you choose Back up now, InvoiceCraftly creates a recovery copy of the current workspace and saves it to the connected provider. When you choose Restore a backup, InvoiceCraftly lists the available backups, downloads the one you select, checks it, and replaces the current workspace only after you confirm the restore.

Personal Cloud is a manual backup and restore workflow, not continuous synchronization. Disconnecting a provider or signing out does not delete backups already stored in your Google Drive or Dropbox account. Delete those files through the storage provider when you no longer want them.

Smart Import sends the text needed to create a draft

Smart Import can turn a description into a reviewable invoice draft. For the optional AI extraction path, InvoiceCraftly shows the data-transfer disclosure before the action runs.

For pasted or typed text, the description you provide is sent to InvoiceCraftly's AI extraction service. For a supported text PDF, InvoiceCraftly extracts text from the PDF on your device and sends the extracted text; the original PDF file is not uploaded for AI extraction.

The submitted text and extraction response are used to produce the requested draft and are not stored by InvoiceCraftly as an invoice document. InvoiceCraftly's current AI extraction service uses Cloudflare Workers AI; Cloudflare's Workers AI data-usage information describes its handling of inference data.

AI-extracted fields can be incomplete or incorrect. Review the draft before creating or sending an invoice.

Lookup sends the search information needed by the selected public registry

Company lookup is optional. Depending on the market, InvoiceCraftly queries public company information from Denmark's CVR data, Norway's Enhetsregisteret, Finland's PRH / YTJ data, or Sweden's Bolagsverket data. The search value you enter is used to perform that lookup.

Abuse-prevention services can process ordinary technical request, browser, device, and interaction information when a protected lookup runs. InvoiceCraftly does not intentionally add company names, registration identifiers, addresses, search terms, or raw registry responses to optional product analytics.

When you choose a result, the supported company details are made available to the editor so you can review and edit the customer fields before using them. Registry information is source data for your invoice; review the customer identity and any transaction-specific VAT or tax treatment yourself.

See supported company-lookup markets. For Denmark, you can also open the CVR lookup.

QR generation uses the details you enter in the browser

InvoiceCraftly creates payment-link, EPC/SEPA, and contact-card QR images in your browser from the fields you provide. Creating the QR image does not send those encoded fields to InvoiceCraftly.

Opening the encoded link or scanning the QR in another app is a separate action handled by that provider or app.

VIES receives the VAT number you ask InvoiceCraftly to check

The VAT country code and number you submit are sent to the European Commission's VIES service. Your invoice contents, seller details, client fields, payment details, and other document data are not part of that lookup.

The result tells you what VIES returned for that check. Use the transaction details and applicable rules to determine the VAT treatment.

Forms send the information you choose to submit

Feedback submissions send the fields you enter, such as email, category, rating, message, and consent, to InvoiceCraftly for review and follow-up. Contact and partnership forms send the fields you enter to the form-processing service used by those pages.

Do not include invoice documents, passwords, payment credentials, or other sensitive information unless it is necessary for the support request.

Analytics runs only after you allow it

InvoiceCraftly uses Google Analytics and first-party product measurement only after you choose Allow analytics. You can decline and continue using the product.

After consent, measurement can include page views, sanitized page paths, page categories, referral information, approved campaign labels, and product events such as opening selected surfaces or completing an export, backup, or restore. InvoiceCraftly does not intentionally include invoice contents, client or seller fields, line items, amounts, payment details, bank details, uploaded files, or document contents in these events.

Sanitized raw first-party product events are intended to be retained for up to 30 days. Aggregate daily or weekly counts may be kept for at least 13 months for product and acquisition reporting. Google processes Google Analytics data under its privacy policy.

You can change your analytics choice from the privacy controls in the site footer.

Hosting and external resources receive normal web-request information

Like any website, InvoiceCraftly must be delivered to your browser. Hosting and security providers can therefore process ordinary connection information such as IP address, browser information, requested URL, timestamps, and security logs.

The site also loads Google Fonts. InvoiceCraftly does not intentionally include invoice or client content in font requests. Document-rendering and QR libraries are served with the site and perform their document work in your browser.

Delete each copy where it is stored

• On-device documents: remove them from InvoiceCraftly or clear this site's browser data.
• InvoiceCraftly account: use the account deletion flow or contact InvoiceCraftly for a privacy/data request.
• Google Drive or Dropbox backups: delete the backup files from your storage provider. Deleting your InvoiceCraftly account does not delete those provider-owned files.
• Submitted forms and analytics: retention follows the purposes described on this page and the relevant service's processing requirements.

You choose the optional data flows