Privacy Policy

Last updated: 24 May 2026

Our Commitment

Invoice Yarn ("we", "our", "us") takes your privacy seriously. We built this product for farmers, producers, makers, and creatives — people who have better things to do than worry about what happens to their data.

We do not use your data for marketing. Period. We do not sell, rent, or share your personal information or business data for advertising, remarketing, audience profiling, or any other marketing purpose.

What Data We Collect

Account Data

When you sign up, we collect:

• Your name and email address
• Your business name and ABN (if provided)
• A password (stored as a bcrypt hash — we never store plaintext passwords)

Voice Data

Invoice Yarn is a voice-activated app. When you speak an invoice, your voice is transcribed locally on our server using an open-source speech-to-text model (Whisper). The transcribed text is then processed by DeepSeek's AI to structure it into invoice line items. This is how the product works — you talk, we turn it into structured invoice data.

Important: While voice transcription happens locally (your audio is not sent to third parties for transcription), the structured text is sent to DeepSeek for parsing into invoice format. DeepSeek is a third-party AI service. We cannot control how DeepSeek handles text data you submit. Your transcribed text is processed by DeepSeek under their own privacy policy, which you should review at deepseek.com/privacy. By using Invoice Yarn, you consent to your transcribed invoice text being processed by DeepSeek for the purpose of invoice generation.

Business Data

We store the business data you create within Invoice Yarn:

• Customer and supplier names and contact details
• Product/service descriptions, quantities, and pricing
• Invoice history and transaction records
• Business profile information (business name, ABN, addresses)

Accounting Integration Data

When you connect Invoice Yarn to your accounting software (Xero):

• We transmit invoice data to your connected accounting platform as you direct
• We may store connection tokens to keep your integration working
• We do not pull or store data from your accounting platform beyond what is necessary for invoice creation and syncing

Usage Data

We collect minimal usage data to operate and improve the product:

• Feature usage (e.g., invoices created, voice sessions completed)
• Error logs and crash data
• Browser and device type (for compatibility)

This data is aggregated and anonymised where possible. It is never used for marketing.

How We Use Your Data

Purpose	Lawful Basis
Provide the voice-to-invoice service	Contract performance
Transcribe voice locally via Whisper, parse via DeepSeek AI	Contract performance
Store and manage your invoices and business data	Contract performance
Sync with your accounting software	Your direction / contract performance
Improve product functionality	Legitimate interest (aggregated/anonymised)
Customer support and issue resolution	Contract performance
Comply with legal obligations (e.g., ATO record-keeping)	Legal obligation

Data We Do NOT Collect or Use For

• No marketing profiling — We do not build profiles of you for advertising or marketing purposes
• No data selling — We never sell your personal or business data to third parties
• No retargeting — We do not use your data for remarketing campaigns
• No email marketing from your data — We do not add you to marketing lists based on your usage of the product
• No behavioural advertising — Your activity within Invoice Yarn is never used for ad targeting

Third-Party Data Processors

Service	Purpose	Data Shared
DeepSeek (AI)	Structured invoice data extraction from transcribed text	Transcribed invoice text
Xero	Invoice syncing to your accounting platform	Invoice data (as you direct)
Supabase (production)	Database and authentication	Account data, business data
Cloud hosting provider	Application and data hosting	All data stored on our servers

Each processor is contractually bound to process data only for the purposes we specify and not for their own purposes.

Data Storage and Security

• Voice recordings are transcribed locally via Whisper and are not permanently stored by Invoice Yarn after transcription is complete
• Account and business data is stored encrypted at rest
• Connections to your accounting software use OAuth or API token authentication
• We use industry-standard encryption (TLS) for data in transit
• Passwords are stored as bcrypt hashes

Data Retention

We retain your data for as long as your account is active. If you close your account:

• Your business data (invoices, customers, products) is deleted within 30 days
• Aggregated usage statistics may be retained but will not be identifiable to you
• Copies of data in your connected accounting software are not affected (that data belongs to you and lives in your accounting platform)
• We may retain data longer where required by Australian tax law (e.g., ATO record-keeping requirements — generally 5 years for tax records)

Your Rights (Australian Privacy Law)

Under the Privacy Act 1988 (Cth) and Australian Privacy Principles, you have the right to:

1. Access — Request a copy of the personal information we hold about you
2. Correction — Ask us to correct inaccurate or incomplete information
3. Deletion — Request deletion of your data (subject to legal retention requirements)
4. Portability — Request a machine-readable export of your business data
5. Withdraw consent — Withdraw consent for voice data processing at any time (note: this will affect the core functionality of the product, as voice processing is how it works)

To exercise any of these rights, contact us at privacy@invoiceyarn.com.au.

International Data Transfers

Your data may be processed outside Australia:

• DeepSeek (AI text processing) operates globally
• Our cloud infrastructure providers may have servers in multiple jurisdictions
• When you connect to your accounting software, data flows through their systems

We ensure appropriate safeguards (Standard Contractual Clauses or equivalent) are in place for international data transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification. Your continued use of Invoice Yarn after changes take effect constitutes acceptance of the updated policy.

Complaints

If you believe we have breached your privacy rights, please contact us at privacy@invoiceyarn.com.au. You also have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Contact

Invoice Yarn
Privacy inquiries: privacy@invoiceyarn.com.au