Privacy policy

Information you choose to provide

You can create invoices and estimates without an account. The document details you enter are sent to our server when you request a PDF, used to render that PDF, and are not saved to an account unless you explicitly sign in and save the document.

If you create an account, we process your email address and the business profiles, customers, documents, logos, settings, and statuses you choose to save. We also keep the minimum billing references needed to synchronize a Pro subscription. We do not store card numbers.

Browser storage and cookies

Anonymous invoice and estimate drafts are stored in your browser for up to seven days so you can continue your work. Essential cookies support authentication, security, and your analytics preference. Clearing browser data may remove local drafts and preferences.

Optional product analytics is off until you choose Allow analytics. When enabled, Zrico sends only approved, content-free product events to PostHog Cloud EU. Autocapture, form capture, and Session Replay are disabled. Analytics never includes invoice text, customer details, email addresses, raw authentication identifiers, or Stripe identifiers. You can withdraw consent from the analytics control at any time.

How information is used

We use information to provide PDFs, authenticate accounts, save the records you request, operate billing, prevent abuse, troubleshoot failures, protect the service, and understand consented product usage. We do not sell invoice or customer content and do not use it for advertising.

Service providers

Zrico uses Vercel for application hosting, Supabase for authentication, database, storage, and managed backups, Stripe for subscription billing, and PostHog Cloud EU for optional consented product analytics. These providers process limited information under their own security and retention obligations. Stripe may retain transaction records independently where required for financial or legal purposes.

Retention and deletion

Saved product data remains available while your account exists. Optional product analytics has a 12-month retention target, and anonymous analytics identity expires after 30 days. Minimal private billing-webhook chronology and user-unlinked deleted-customer tombstones may be retained for 90 days to prevent late events from recreating deleted access.

Account deletion removes live application rows, private logo assets, application billing linkage, and the authentication identity. A current subscription is canceled immediately without proration or refund. Stripe records and temporary encrypted backup copies may remain until the relevant provider retention period expires. Anonymous drafts in your browser are not synchronized and remain until they expire or you clear them.

Security and choices

We use access controls, row-level database policies, private asset storage, validation, encryption in transit, and bounded operational logs. No internet service can guarantee absolute security. You can edit or delete saved records in your account, decline optional analytics, or delete the account entirely.

Contact

Questions or privacy requests can be sent to support@zrico.com.