Last updated: 28 October 2026.
This Privacy Policy describes how InvoiceBizz (“InvoiceBizz,” “we,” “us”) handles information when you use the website and the browser invoice generator at https://invoicebizz.com/.
It is based on how the InvoiceBizz WordPress plugin actually works. It does not cover websites, payment processors, or tools that we do not operate. Some features below are optional: they run only if they have been connected. Where a feature is optional, that is stated clearly.
Who we are
InvoiceBizz is an individually operated online invoicing project. The public brand name is InvoiceBizz. The public website is https://invoicebizz.com/, hosted by Hostinger.
InvoiceBizz is not a registered company. This policy does not include a company registration number, tax identifier, or postal address, because none have been provided. Whether a postal address is legally required depends on your location and applicable law. That question needs professional legal review before this page is treated as a finished legal notice.
Privacy questions: use the Contact page or email invoicebizzofficial@gmail.com. Contact form and email-tips notices are sent to that address and, if it is different, to the WordPress administration email for this site.
What this service does — and does not do
You fill in an invoice in your browser, preview it, and download a PDF or print it. You send that file to your client yourself. InvoiceBizz does not email invoices to your clients and does not collect payment from your clients.
Invoice contents (business names, clients, line items, logos)
The generator form (seller details, client details, line items, tax label and percent, notes, payment details, and an optional logo) is processed in your browser to update the live preview, calculate totals, build a PDF file, and print.
The PDF is created on your device as a file in the browser and downloaded from there. Print uses your browser’s print dialog. The logo, if you add one, is read in the browser as a data URL (up to 2 MB). It is not uploaded to the InvoiceBizz media library as part of that flow.
If you click Save draft, the plugin writes that invoice — including the logo data if present — to localStorage in this browser under the key invoicebizz_invoice_draft. Clearing the draft, or clearing this browser’s site data, removes that copy from this device. InvoiceBizz cannot read that draft from another device.
This does not mean that nothing related to invoicing ever reaches our servers. When you finish a PDF download or a print, the generator sends a small request to this website to record that one invoice was completed against your monthly limit. That request includes a security nonce. It does not include the invoice’s line items, client names, amounts, or logo.
Like any website, our host still receives ordinary technical data for the page itself (for example IP address, browser type, and the page URL) when you load the generator or complete that usage request. We do not claim that your visit is invisible to the server.
Do not paste full client invoices into the Contact form unless you intend us to read them. We did not build the generator to store your customers’ invoices on our server.
Monthly usage counts
Free, Pro, and Business plans limit how many PDFs or prints you can finish each calendar month (UTC). To enforce that limit we store a count, not the invoice document:
- If you are not signed in, we set an HTTP-only cookie named
invoicebizz_uid(a random 32-character value, valid for about one year) and store a row such as “this guest identity used N invoices in YYYY-MM.” - If you are signed in, we store the count against your WordPress user id for that month.
- If Supabase is connected with a secret (service) key, the same monthly count may also be written on the Supabase server for signed-in users. Invoice line items are not part of that write.
There is no automatic deletion job for old usage rows in the plugin. A new month starts a new row.
Cookies and similar storage we set
The InvoiceBizz plugin itself may set:
invoicebizz_lang— interface language (about one year). Set from the language control. Not HTTP-only, because the page script needs it. This is a preference cookie, not an advertising cookie.invoicebizz_uid— guest usage identity (about one year, HTTP-only, SameSite=Lax). Set when a guest records a completed invoice. It exists so we can enforce the monthly limit without an account.localStoragekeyinvoicebizz_invoice_draft— optional saved invoice on this device.localStoragekeyinvoicebizz_optin— remembers whether you closed or submitted the email-tips popup on this device, so we do not keep showing it.
If you sign in, WordPress also uses its standard account cookies (for example to keep you logged in). WordPress, the Kadence theme, Rank Math, a cache plugin, or Hostinger may set additional cookies. This plugin does not add Google Analytics, advertising pixels, or a cookie-consent banner.
Whether a consent banner is required depends on which scripts actually run on the live site and on the laws that apply to you. This plugin does not install a banner automatically.
Contact form
The Contact page sends the name, email address, and message you type to invoicebizzofficial@gmail.com (and, if it is different, the WordPress administration email) using WordPress wp_mail(). A hidden “website” field is used only as a spam trap; if it is filled, the message is discarded. The plugin does not save Contact submissions in a database table.
The InvoiceBizz plugin does not configure SMTP. Copies may exist in the Gmail inbox and in whatever mail log the host keeps. WordPress cannot automatically delete those copies. The live Hostinger mail transport has not been verified from this project.
Email tips (optional popup)
A popup may ask for an email address for short invoicing tips. Submitting it stores that email, a timestamp, and a source label (site or checkout) in the WordPress database (option invoicebizz_optin_emails, newest 2,000 addresses). We also email a notice to invoicebizzofficial@gmail.com and, if it is different, the WordPress administration email. Rate limiting uses a short-lived hash of your IP address (not stored as a marketing list). We do not use this list to send invoices to your clients.
An administrator can remove a saved address in WordPress admin. Visitors do not have a self-service remove button. You can also email invoicebizzofficial@gmail.com and ask that an opt-in address be removed.
Accounts (optional — only if sign-in is connected)
Creating an account is optional for generating invoices. The Account page requires Supabase Auth to be configured. If it is not configured, registration and sign-in are disabled.
When Auth is connected and you register or sign in, you provide an email address and a password (at least 8 characters). That request is sent from WordPress to Supabase Auth on the server. The plugin does not put the Supabase secret key in the generator script. After a successful sign-in, WordPress creates or links a local user and may store your Supabase user id on that account. WordPress then uses its normal login cookies. See the Supabase Privacy Policy.
We store plan and billing-related fields on the WordPress user when payments are used, for example current plan, payment provider, and processor customer or subscription ids — not your card number.
The plugin does not include a “delete my account” button. WordPress Tools can export or erase plugin-owned usage counts, plan fields, and email-tips addresses for an account email. That does not delete browser drafts, Hostinger logs, Gmail copies, Supabase records, or payment-processor records.
Paid plans (optional — only if a payment provider is connected)
Checkout runs only after payment keys are saved. Card details are entered on the payment provider’s pages or overlay, not in the invoice generator form. This plugin does not load Stripe.js on the generator. Until keys are saved, paid checkout does not run.
Which provider is connected on the live website has not been verified from LocalWP. Local checkout is currently disabled.
Lemon Squeezy is the intended live provider when Lemon Squeezy keys are saved. In that state, billing and pricing pages may load https://assets.lemonsqueezy.com/lemon.js. Starting checkout sends your account email and an InvoiceBizz user id to Lemon Squeezy so the payment can be matched after the webhook. Lemon Squeezy processes the subscription under its Privacy Policy.
Stripe is optional and is used only if the site owner switches the payment provider to Stripe and saves Stripe keys. In that case WordPress talks to Stripe’s API on the server. We may create a Stripe customer with your account email, display name, and our user id. Manage-subscription uses Stripe’s customer portal. Stripe processes the payment under its Privacy Policy. Card numbers are not stored in the InvoiceBizz plugin.
Supabase (optional)
If a Supabase project is connected:
- Auth (email and password) uses the project URL and publishable key on the WordPress server.
- Profile, subscription, and monthly usage writes use the secret key on the WordPress server only. Those records are things like email, WordPress user id, plan name, processor ids, and invoice counts — not the contents of invoices you typed in the generator.
If Supabase is not connected, usage stays in WordPress, and account sign-in does not work.
Fonts and other third-party files
The plugin loads the Poppins font from Bunny Fonts (fonts.bunny.net). The Chinese interface may also load Noto Sans SC from Bunny Fonts. Your browser requests those files from Bunny; Bunny may see your IP address and user agent. See the Bunny privacy information.
Footer links to Facebook, Instagram, X, LinkedIn, and YouTube are ordinary links. They do not load those companies’ tracking pixels through this plugin.
WordPress, Kadence, Rank Math, LiteSpeed or other cache plugins, and Hostinger may load additional scripts or set cookies. Review those products’ settings if you need a full cookie list for the live site. Hostinger’s processing is described in the Hostinger Privacy Policy.
Server logs and diagnostics
invoicebizz.com is hosted by Hostinger. Hostinger typically logs requests (IP address, time, URL, user agent). The InvoiceBizz plugin does not set Hostinger’s log retention, backup retention, or mailbox retention. Those periods have not been verified from this project, so this policy does not state a number of days. See the Hostinger Privacy Policy.
The plugin may store a short diagnostic code in WordPress (for example a failed usage write) without invoice contents or secret keys. If WordPress debug logging is enabled on the server, similar event names may be written to the PHP error log.
What we do not do (in this plugin)
- We do not add analytics or ad pixels in the InvoiceBizz plugin.
- We do not sell invoice line items. The generator is not built to upload those fields for marketing.
- We do not email your invoice to your client.
- We do not collect your client’s card payment for the work you billed them.
- We do not claim ISO, GDPR, CCPA, or SOC certifications in the product.
How long we keep information
Drafts: until you clear them or this browser’s storage is cleared.
Language and guest-usage cookies: about one year, or until you delete cookies.
Contact emails: the plugin does not store them. Copies last as long as they remain in our inbox and mail logs. The intended target is to keep Contact copies only as long as needed to handle the request, then delete them from the privacy inbox within 12 months of the last relevant interaction, unless a legal obligation, dispute, or other lawful reason requires longer. That 12-month target is an owner-approved practice. It is not an automatic WordPress job, and it has not yet been verified as an operational mailbox routine.
Opt-in emails: until you ask us to remove yours, or until they fall off the 2,000-row cap. There is no scheduled wipe.
Usage counts: kept by month in WordPress (and in Supabase if connected) until we delete them. There is no scheduled wipe in the plugin.
Account and payment-related fields on the WordPress user last for as long as the account exists. We do not control how long a payment processor keeps records. If Lemon Squeezy is connected, see the Lemon Squeezy Privacy Policy. If Stripe is connected, see the Stripe Privacy Policy.
Your choices and privacy requests
- Use the generator without creating an account.
- Do not click Save draft if you do not want a copy in this browser.
- Clear drafts with the generator’s clear-draft control, or clear this site’s data in your browser.
- Block or delete cookies in your browser (the language cookie and, after a completed PDF/print as a guest, the usage cookie).
- Skip the email-tips popup, or email invoicebizzofficial@gmail.com to ask that an opt-in address be removed.
- Do not upgrade if you do not want a payment processor to receive your account email.
- To ask for a copy of WordPress-held InvoiceBizz records, or to ask us to delete an account and related usage or opt-in records, use the Contact page or email invoicebizzofficial@gmail.com and include the email address on the account. We may ask for proportionate information to verify the request.
The intended handling target is to respond to a verified privacy request within 30 calendar days, subject to applicable law. That target is an owner-approved practice. It is not yet verified as an operational routine, and it is not a guarantee of complete erasure in every system (for example payment processors, Hostinger logs, or your own browser storage).
Children
InvoiceBizz does not include an age gate or age-verification step. This policy does not claim that the service excludes children or enforces a minimum age. Whether children’s-privacy language is required needs legal review based on the intended audience and applicable law.
Changes
We may update this page when the product changes. The date at the top will change when we do. After an update, you should read the new text.
How to contact us
Use the Contact page or email invoicebizzofficial@gmail.com. This policy does not include a postal address.