Privacy Policy

Version 1.1 · Last updated 19 October 2026

1. Who we are

Invoice Maker (invoicemaker.maxpower.studio) is run by MaxPower Studio. For any privacy question or request, email [email protected]. We aim to follow the Australian Privacy Principles, the EU and UK GDPR and other privacy laws that apply.

2. What stays on your device

Everything you type or upload into the free tool is saved by your browser in its local storage on your device, so you can come back to it. This includes your invoices, quotes, receipts, credit notes and drafts, your business and client details, your logo, numbering settings for each document type, your remembered business details (if "Remember my business details" is on) and your email signature details. PDFs and QR codes are created on your device.

• We can't see, access or recover this data. It isn't sent to us or synced anywhere.
• It stays until you click Clear my data (in the footer of every page), delete invoices yourself, or clear this site's data in your browser settings.
• Anyone who uses the same browser profile on your device can see it. On a shared computer, click Clear my data when you're done.
• Backup (JSON) and history (CSV) files you export are saved on your device and are your responsibility.
• Turning off Remember my business details deletes the remembered copy straight away; documents you already saved keep their own details.

We also keep one small technical note in your browser's session storage to avoid reloading the page twice after an update. It contains no personal data and disappears when you close the tab.

3. Cookies, analytics and tracking

We don't set any cookies, show ads, or use tracking or fingerprinting. We may use Cloudflare Web Analytics, which doesn't use cookies and doesn't track individuals across sites. It counts visits using aggregated data such as the page visited, referrer, browser type and country.

4. What our hosting provider processes

The site is hosted by Cloudflare, Inc. When you load a page, Cloudflare processes standard technical data: your IP address, browser and device type (user agent), the page requested, the referring page, the date and time, and an approximate location derived from your IP address. This is needed to deliver the site and protect it from attacks and abuse. We don't use this data to identify you. Cloudflare keeps logs under its own retention rules; see the Cloudflare Privacy Policy.

5. Links and images you add

• Payment link and QR code: the link is only turned into a QR code and a clickable link in your PDF, on your device. We don't contact your payment provider.
• Email signature logo link: if you enter an image link, your browser loads that image from the website you linked to, so that website can see your IP address. People who receive your emails may load it too. We never fetch or store the image.

6. If you email us

If you contact support, we receive your email address and whatever you include in your message, and use them only to reply and help you. We keep support emails for up to 2 years and then delete them, unless we need them longer to deal with a dispute or a legal requirement.

7. Legal bases (EU and UK)

Cloudflare's processing of technical data and any cookieless analytics rely on our legitimate interests in running a secure, working website. Support emails are handled on the basis of our legitimate interest in answering you, or to take steps you ask for.

8. International transfers

Cloudflare runs a global network, so technical data may be processed in countries other than yours, including the United States. Cloudflare relies on recognised safeguards such as the EU Standard Contractual Clauses and the EU-US Data Privacy Framework.

9. Your rights

Depending on where you live, you may have the right to access, correct or delete personal data, to object to or restrict processing, and to data portability. Because we don't store the data you enter in the free tool, you control it directly: export it with Export backup and delete it with Clear my data. For anything else, email us. You can also complain to a regulator, such as the Office of the Australian Information Commissioner, the UK ICO or your local EU data protection authority.

10. Children

The tool is for people aged 16 and over.

11. Security

The site is served only over HTTPS with strict security headers, and loads no third-party code apart from Cloudflare's cookieless analytics script (if enabled). Your data's safety on your device also depends on your device and browser security.

12. Paid accounts in future

The tool is free and has no accounts. If we add optional paid accounts, we'll update this policy to explain exactly what is stored and why before any account data is collected.

13. Changes

If we change this policy, we'll update the version and date at the top and highlight important changes on the site.