Privacy Policy
This policy explains what we collect, why we collect it, who we share it with, and the choices you have.
Last updated: 27 October 2026
1. Who we are
Invoice Maker by DSource360 (in-app name: DSource360 Invoice; Pro: Invoice Maker Pro) is provided by DSource360 (“we”, “us”, “our”).
- Privacy & support: support@invoice.dsource360.com
- Product site: invoice.dsource360.com
- Formal legal notices: email the same address with subject Legal notice. We will provide our current registered office details for service of process upon verified request.
Today the primary product is the Android app. This website hosts marketing and legal pages and public shared-invoice links. An authenticated web app and iOS app are planned and not yet available; this policy will cover those surfaces when they launch.
2. Scope
This policy applies to the Android app, this website (including public invoice share pages), and related support channels. It does not cover third-party websites or stores (Google Play, Google, Apple) that have their own policies.
3. Data we collect
- Account: email, display name, and sign-in provider (email/password, Google; Apple Sign-In when offered) when you authenticate.
- Business content: business profile, clients, catalog items, invoices, estimates, payments, expenses, logos, notes, tax fields, and related files you enter or upload.
- Device & ops: stable device id, app version, approximate country/locale (not GPS for presence), IP address as seen by our servers or edge (Cloudflare) for security and routing, and
last_app_open_atfor signed-in engagement. - Contacts (optional): if you import from the device address book, we read contacts on-device to help you create clients. Raw phone contacts are not uploaded unless you save them as clients in the app.
- Biometrics (optional): if you enable biometric app lock, fingerprint/face data stays in the device OS secure enclave. We never receive or store your biometric templates.
- Notifications (optional): a push token (FCM) if you allow notifications, used to deliver product messages when that channel is enabled.
- Diagnostics: Firebase Analytics and Crashlytics events. Firebase Remote Config may deliver maintenance, update, offer, or ads-configuration flags — not your invoice content.
- Advertising (Free tier only): if you use the app without an active Invoice Maker Pro entitlement, Google AdMob (Google Mobile Ads) may use your advertising ID, device and app activity, and approximate location derived from IP to show ads, subject to your consent where required (including the EU/UK via Google’s User Messaging Platform). Pro subscribers do not see ads. You can reset or limit your advertising ID in Android settings.
- Subscriptions: store purchase tokens and entitlement status needed to verify Invoice Maker Pro (we do not store card numbers). Billing is through Google Play on Android.
- Support: content of emails or in-app feedback you send us.
- Public share links: when you share an invoice link or QR, recipients may open a public page on this site; optional PIN or expiry settings you choose apply. Access metadata (e.g. IP, time) may be logged for abuse prevention.
4. Why we process data (purposes & legal bases)
Depending on your location, we rely on one or more of: contract (to provide the Service you request), legitimate interests (security, abuse prevention, product reliability, aggregated analytics), consent (optional contacts, notifications, personalized ads where required by law, and any non-essential cookies when used), and legal obligation (tax, accounting, or lawful requests).
- Provide invoicing, estimates, PDF, sync, backup, and subscription features.
- Secure accounts, prevent fraud/abuse, and operate the service.
- Improve reliability using aggregated analytics and crash reports.
- Respond to support and privacy requests.
- Comply with law and enforce our Terms.
We do not sell your invoice contents to advertisers.
4a. Advertising (Free tier only)
If you use Invoice Maker without an active Invoice Maker Pro entitlement, the Android (and later iOS) app may show ads from Google AdMob (Google Mobile Ads). Pro subscribers do not see ads. Restore Purchases restores ad-free access.
Ads may appear on browsing screens (Home below widgets, lists, More, Reports), as a labeled native card in invoice/estimate lists, as a full-screen ad after you share or save (not on the invoice editor or PDF preview), and as an optional rewarded ad (“watch for 1 extra invoice this month”). We do not place ads on invoice/estimate create or edit, PDF preview, print, payment recording, or the paywall.
To show ads, Google may use your advertising ID, device and app activity, and approximate location derived from IP, subject to your consent where required (including the EU/UK via Google’s User Messaging Platform). See Google’s privacy policy: https://policies.google.com/privacy.
5. Offline-first, guest mode & sync
Business data is stored on your device first (local database). You can use core features as a guest; data stays local until you create or sign in to an account. When you are signed in and online, changes may sync to our servers so you can restore or use multiple devices. Local work is not blocked waiting for the network.
Android Auto Backup does not include your financial database. Move data between devices with the in-app encrypted portable backup (and optional Drive) when you need a full transfer.
6. Sharing & subprocessors
We share data only as needed to run the product, for example:
- Cloud hosting and databases (DigitalOcean)
- CDN / edge security (Cloudflare)
- S3-compatible object storage for files such as logos and PDFs
- Transactional email delivery
- Google Play Billing for Android subscriptions
- Google Firebase (Analytics, Crashlytics, Remote Config, FCM)
- Google AdMob / Google Mobile Ads (Free-tier ads only; advertising ID shared with Google for advertising)
- Google Sign-In / Google OAuth (when you choose that sign-in)
- Backend error monitoring (e.g. Sentry) for service reliability
- Apple In-App Purchase, Sign in with Apple, and/or Stripe — only when those platforms or web checkout are launched and announced
We require processors to protect data under applicable agreements. We may disclose information if required by law, to protect users and the service, or in connection with a merger, acquisition, or asset sale (with notice where required).
7. Retention & account deletion
We keep account and business data while your account is active. When you confirm account deletion:
- Access tokens are revoked; you have a 7-day window where signing in again cancels deletion.
- After that window, personal data is anonymized; eligible data and files are hard-erased within about 30 days after anonymization.
- Some records may be retained longer when required by law (for example billing audit trails, or anonymized/minimized invoice totals) as described in our deletion process.
Prefer in-app: Settings → Account → Delete Account. Also see Delete account. Cancel store subscriptions separately in Google Play (or Apple when available) to stop renewals — deleting the account does not cancel the store subscription for you.
8. Your rights
Depending on where you live (including GDPR/UK GDPR and CCPA/CPRA), you may have rights to:
- Access or export your data (in-app export when signed in)
- Correct inaccurate information
- Delete your account and associated personal data
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent
- Lodge a complaint with a supervisory authority where applicable
Use in-app settings, visit Delete account, or email support@invoice.dsource360.com. We will verify requests before fulfilling them.
California / “Do Not Sell or Share”: We do not sell personal information and do not share it for cross-context behavioral advertising. You may still email us with subject Do Not Sell or Share to make a request or ask questions.
9. Children
The app is intended for business users age 16+ (or the higher age required in your country). We do not knowingly collect data from children. If you believe a child has provided data, contact us and we will take appropriate steps.
10. Security
We use TLS in transit, access controls, tenant isolation on the server, and platform secure storage for tokens on mobile. No method of transmission or storage is 100% secure. If we become aware of a breach affecting your personal data, we will notify you and regulators as required by applicable law.
11. Cookies & this website
See our Cookie Policy. In short: this marketing and legal site is primarily static content and public invoice share pages. We do not use advertising cookies. Essential technical storage may be used for share-link flows. If we add non-essential analytics cookies later, we will update our policies and seek consent where required.
12. International transfers
Servers and subprocessors may process data in countries other than yours (including where DigitalOcean, Cloudflare, Google, or other processors operate). We apply appropriate safeguards as required by applicable law.
13. Automated decisions
We do not use automated decision-making that produces legal or similarly significant effects about you without human involvement. Entitlement checks verify store purchases to unlock Pro features.
14. Changes
We may update this policy. Material changes will be reflected by the “Last updated” date and, where appropriate, in-app or email notice. Continued use after the effective date means you acknowledge the updated policy, except where applicable law requires a different standard.
15. Contact
Privacy questions: support@invoice.dsource360.com.