Last updated: 13 February 2026

Invio ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal information in accordance with the New Zealand Privacy Act 2020.

1. Information We Collect

Information You Provide:

• Account information (name, email, password)
• Business details (business name, address, GST number, bank account)
• Invoice and quote data, and payment records
• Communications with our support team

Information Collected Automatically:

• IP address and browser type
• Device information
• Usage data (pages visited, features used)
• Cookies and similar technologies

2. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process your invoices, quotes, and payments
• Send transactional emails (invoice reminders, quotes, receipts)
• Improve our Service
• Respond to support requests
• Comply with legal obligations
• Detect and prevent fraud

3. Legal Basis for Processing

• Contract performance: Providing the Service you signed up for
• Legitimate interests: Improving our Service, security
• Legal compliance: Tax records, fraud prevention
• Your consent: Marketing emails, optional features

4. Data Sharing

We may share your information with service providers (hosting, email, payment processing), professional advisors, and law enforcement when legally required.

We do NOT sell your personal data or share data with advertisers.

Third-Party Services We Use:

• MongoDB Atlas (database hosting)
• Vercel (web hosting)
• Stripe (payment processing)
• Brevo (email delivery)

5. Data Retention

• Active accounts: Data retained while account is active
• Cancelled accounts: Data deleted after 30 days
• Invoices and Quotes: Retained for 7 years (NZ tax requirements)

6. Data Security

We protect your data with encryption in transit (HTTPS/TLS), encryption at rest, secure password hashing, and regular security audits.

7. Your Rights (NZ Privacy Act 2020)

You have the right to access, correct, or delete your personal information. To exercise these rights, contact us at privacy@invio.co.nz.

8. Cookies

We use cookies for authentication, preferences, and analytics. You can control cookies through your browser settings.

9. Contact Us

Privacy Officer: Bakhtiyar Duganov trading as Invio
Email: privacy@invio.co.nz
Address: Auckland, New Zealand

10. Complaints

If you have concerns about our handling of your data, you can contact the Office of the Privacy Commissioner:
Website: privacy.org.nz
Phone: 0800 803 909