Invoice privacy

Local work

Document previews and PDF generation run in your browser. Business details, customer details, logos and line items are not uploaded during ordinary local editing or generation. Saving on this device writes an editable record to browser storage. Device backups include these details; keep them private. Clearing browser data removes local saved records and local numbering.

Optional account features

Connecting your Emberkit account uses its session cookie. Explicit cloud saves upload the selected invoice or quote details and logo, customer, or service to our database. Records are private to the authenticated account and have no public sharing URL. Opening an item retrieves it to your device. Server storage limits apply even when generation is unlimited.

When connected, a download sends its document count, a random request ID and a SHA-256 fingerprint to record monthly usage and handle retries. It does not send the generated PDF or source details for this usage request. Without an account, the usage counter is stored in this browser.

Deletion and cancellation

You can delete local and cloud copies independently. Cancelling a paid plan does not delete saved cloud records; you can still read and delete them. Deleting your shared Emberkit account removes its invoice records, numbering and usage data from the application database. Provider backups may retain copies for their normal backup lifecycle.

Providers

Vercel serves application files and may log IP addresses, page requests and browser information. Stripe processes subscriptions and billing details. Customer invoices, line items and logos are not sent to Stripe. This release does not email customers or collect their payments.

Contact support with privacy questions.