Privacy.
In force from 16 September 2026
The short version
Invoice Badger keeps your email address, a hashed password, your business details, and the clients, rates, invoices and time entries you enter. For your own clients' personal data you are the controller and Invoice Badger processes it for you. Nothing is sold, and the only cookies are the two that make the site work.
It runs on Cloudflare with the database in the EU. Stripe takes payment if you buy Pro, and Resend sends the emails. From the account page you can download everything as one file, or delete the account, and the data is removed within 30 days apart from records the law requires.
This summary is here to be read. The clauses below are what actually binds.Invoice Badger ("we", "us") is run by Moonlathe Technologies Ltd, a company registered in England and Wales (company number 17493793), the data controller for your account data. We are registered with the Information Commissioner's Office (ICO), registration number ZC266615. Questions? Email support@invoicebadger.com.
What we collect
- Account details: your email address, a securely hashed password, and the business details you enter (business name, address, payment terms, currency).
- Invoicing data you create: your clients, rates, invoices and time entries. This can include personal data about your own clients; for that data you are the controller and we act as your processor, handling it only to run the service for you.
- Technical data: standard server logs (such as IP address and request details) kept briefly to keep the service secure and running.
Cookies
We use two strictly necessary cookies: one keeps you signed in, and one carries the answer to what you just did from one page to the next. No advertising or analytics cookies, so we don't show a cookie banner. See our Cookies page.
Why we use it (lawful basis)
- To provide the service you signed up for (contract).
- To keep it secure and working (legitimate interests).
- If you buy Pro, to take payment (contract) and meet tax and accounting duties (legal obligation).
Payments
Card payments are handled by Stripe. We never see or store your full card details. Stripe processes your payment information under its own privacy policy.
Who we share it with
We don't sell your data. We use a small number of trusted providers to run the service: Cloudflare (hosting, database and PDF rendering; our database is stored in the EU), Stripe (payments, only if you buy Pro) and Resend (sending our emails, such as sign-up, password reset and receipts). The full list, with what each one does, is on our Sub-processors page. We may disclose data where legally required.
If you connect an AI assistant to Invoice Badger over MCP (for example Claude), the requests you make flow to that provider under your own agreement with them. That's your choice of tool, not a provider we impose on you.
How long we keep it
While your account is active. If you delete your account, we remove your data within 30 days, except records we must keep for legal or tax reasons. Deleting it is done from the account page, with your email address and your password.
Your rights
You can access, correct, delete, export, or object to/restrict our use of your data. The account page lets you change your details, download everything on your account as one JSON file, and delete the account. For anything else, email support@invoicebadger.com and we'll help. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
Data processing agreement
If you handle your own clients' personal data through Invoice Badger, our Data Processing Agreement sets out how we process it for you. Need a copy countersigned in your business's name, or changes? Email support@invoicebadger.com and we'll sort one out.
Changes
We'll update this page and the date above when anything changes.
Ask, and the wording gets fixed rather than explained.