Privacy

Billify generates invoices and PDFs entirely on your device. Everything you enter — company details, line items, logos — is stored only in your browser's localStorage. There is no server-side database of invoices, and we cannot read your invoice data.

Share links are produced locally too: the invoice is encoded into the link itself and decoded in the recipient's browser. We never receive it.

Pro subscriptions are processed by Stripe. Card details go directly to Stripe — they never touch Billify's servers. We receive only a token that confirms your subscription status.

We run self-hosted, cookieless analytics on our own infrastructure to count page views and which buttons are clicked. No cookies, no fingerprinting, no third-party advertising or tracking networks, and no cross-site profiling. We count pages, not people.

Cloud sync is an optional feature that lets you back up your invoices to your own Google Drive so you can use them across devices. It is entirely opt-in — the feature is invisible until you explicitly enable it.

Zero-knowledge by design. When you enable cloud sync, your browser connects directly to Google Drive using a limited-scope token (the drive.file scope — Billify can only see files it creates, not the rest of your Drive). Your invoice data is encrypted in your browser before it is uploaded. We never see your encryption key, your data's contents, or even that you are using cloud sync. Google stores only encrypted files it cannot read.

The OAuth token and encryption key live in your browser's local storage. Clearing your browser storage removes both. You can disconnect cloud sync at any time from the sync settings; this revokes the token and stops syncing, though your encrypted backup remains in your Google Drive until you delete it yourself from Google.

For GDPR purposes, Billify is not a data controller for cloud-synced data: we never receive or process personal data through this feature. Google is the controller for the OAuth flow and Drive storage under their own privacy policy.

There is no account for the free tier — your data lives only in your browser, so clearing your browser storage removes it. Pro subscriptions are managed through Stripe and can be cancelled any time from Stripe's customer portal. If you enabled cloud sync, you can delete the encrypted backup from your Google Drive at any time.