Privacy Policy

Last updated 22 September 2026

1. Controller

Flowgrid LTD (company number 17474059), Unit 82a James Carter Road, Mildenhall, Bury St. Edmunds, IP28 7DE, United Kingdom, is the controller of personal data processed through PayMyInvoice. Contact: contact@paymyinvoice.app.

2. What we process

• Account data — name, business name, email address, hashed password, country.
• Invoice data — invoice numbers, amounts, currencies, dates, line items and the name and email of the customer being billed, imported from the systems you connect or pushed through our API.
• Technical data — IP address, browser type and access logs, used for security and abuse prevention.
• Support messages — your name, email address and what you write in the contact form, kept so we can answer you and see the history of a conversation. The rate limit on that form works on a one-way hash of your IP address, not the address itself.

We do not receive or store card numbers or bank credentials. Those are handled by the regulated payment institution processing the payment.

3. Why we process it

• To perform our contract with you — running the service you signed up for.
• To comply with legal obligations, including accounting and anti-fraud rules.
• For our legitimate interests in securing and improving the service.

4. Where your customers fit in

When you generate a payment link, we process your customer's name and email on your instructions, as a processor acting for you. You remain responsible for having a lawful basis to share that data with us.

5. Retention

Invoice records are kept while your account is active and for six years afterwards where required for tax and accounting purposes. Disconnecting an accounting system removes the invoices imported from it from your dashboard.

6. Sharing

We share data with infrastructure and hosting providers, with the accounting vendors you connect, and — once available — with the payment institution processing a given payment. We do not sell personal data.

7. Your rights

You have the right to access, correct, delete and port your personal data, and to object to or restrict its processing. Write to us at the address above. You may also complain to the UK Information Commissioner's Office or your local supervisory authority.

8. Cookies

We set a single first-party cookie to keep you logged in. We do not use advertising or cross-site tracking cookies.