Privacy Policy
Last updated: May 2026
What we collect
- Account information: your name, email address, and password (stored as a secure hash).
- Invoice data: invoice numbers, amounts, due dates, line items, and notes you create.
- Client data: names, email addresses, and contact details you add for your clients.
- Usage analytics: page visits and feature usage via PostHog, to help us improve the app.
- Email logs: records of automated follow-up emails sent through Vasulify.
How we use your data
- To operate your account and provide the Vasulify invoice automation service.
- To send automated follow-up emails to your clients on your behalf.
- To display your invoice history, client list, and payment analytics.
- To improve the product based on anonymised usage patterns.
What we do NOT do
- We do not sell your personal data or your clients' data to third parties.
- We do not use your data to show you advertising.
- We do not share your invoice or client data with anyone except the email delivery service needed to send reminders.
Data storage and security
- Your data is stored in a secured SQL Server database.
- Passwords are hashed using ASP.NET Core Identity (PBKDF2 with HMAC-SHA256).
- HTTPS is enforced for all connections.
- We take reasonable precautions to protect your data, but no system is 100% secure.
Third-party services
- Email delivery: we use an SMTP service to send invoice reminder emails.
- Analytics: PostHog is used for product analytics. Data is anonymised where possible.
- Payments: if you add a Stripe payment link to an invoice, your client is directed to Stripe's own platform — we do not handle payment card data.
Public invoice links
- When you share a public invoice link (/i/token), anyone with that link can view the invoice.
- The link contains only the invoice details — it does not expose your account, other invoices, or your clients' email addresses.
- Share links only with intended recipients.
Your rights
- You can delete your account and all associated data by contacting [email protected].
- You can request a copy of your data at any time.
- You can update or correct your account details from the Settings page.
Cookies
- Vasulify uses a session cookie to keep you logged in.
- We also set a cookie for anti-forgery protection on forms.
- No advertising or tracking cookies are set.
Contact
- If you have questions about this privacy policy, email [email protected].