Privacy Policy
Last updated: 24 October 2026
InvoiceCheeta (“we”, “us”) provides invoicing software for businesses in Pakistan. This policy explains what personal and business data we handle when you use our website, the no-signup demo, or a paid account — and what you can ask us to do with it.
1. Data we collect
Account data. Your email address and password (stored as a hashed credential), and the sign-in session that keeps you logged in.
Business identity. Company name, logo, phone number, address, NTN and registration number, your Easypaisa / JazzCash / bank payment details, and your digital stamp — everything you enter in business settings or edit on an individual invoice.
Your records. Customers (name, phone, address, email), products and services (English and Urdu names, rate, unit, tax, photos, bullet details), and the documents you create: invoices, estimates, receipts, their line items, totals, notes and terms.
Chat content. The messages you send in the invoice chat, and any product photos you attach, are processed to build your invoice draft.
Payment data. When you pay for a subscription you submit your name, the payment method, the transaction reference and the amount and date of the transfer so our team can verify it.
Demo usage data. The no-signup demo stores a session marker in your browser and a small counter (including a hashed request identifier) so the free trial cannot be abused. Demo invoices are not saved to your name.
2. How we use it
To generate your invoices, estimates and receipts as PDFs in English, Urdu or bilingual form; to show your dashboard, numbering and payment status; to let the AI assistant draft documents from your description; to verify subscription payments and switch on access; and to reply when you contact support. We do not sell your data and we do not run advertising.
3. AI processing of your messages and photos
To turn your description into a draft, the text of your chat and the photos you attach are sent to our AI processing provider, which returns structured customer and product details. That provider acts on our instructions and is used only to produce your draft; the same text and photos are not published to other users. Demo chats are temporary and never read or write a real account's products or customers. You stay in control: nothing is saved to your product or customer list until you approve it, and a draft is only what you choose to turn into an invoice.
4. Storage and security
Your records live in a managed database with row-level security, so your invoices, customers and items are readable only by your own account (and the team seats you pay for). Logo, stamp and product images are kept in private storage buckets that are not publicly listable; documents load them through time-limited signed links. All traffic is served over HTTPS. A small number of staff members with administrator access can see user accounts and payment submissions in order to approve subscriptions and help with problems — not to reuse your business data.
5. How long we keep data
Account, catalog and document data is kept while your account is open, and for as long as you keep the records yourself — you can delete a document, customer or product at any time. When you ask us to close your account, we remove your records and uploaded files. Demo chat text and photos are not kept as account data, and a demo invoice stays in your browser session with a DEMO watermark. Payment submission records are kept while your subscription is active and afterwards for accounting evidence.
6. Cookies and browser storage
We use a sign-in session so you are not asked for your password on every page, and browser storage for the demo state (your one free invoice and the trial marker). The demo also sets a signed, HttpOnly session cookie used only to keep the free AI usage within its limits. These are functional, not advertising, technologies.
7. Who we share data with
Only the service providers that host our database and files, process AI requests, and deliver transactional email such as password resets — each for that purpose alone. We may also disclose data if we are legally required to, or to protect our users, our rights, or the safety of the service. If you use InvoiceCheeta for your business, your own customers' details are held by you as the business owner; you decide how they are used and you should tell them how you handle their information.
8. Your rights
You can access, correct, export or delete your data. Most of it you can do yourself inside the app — edit your company profile, update or remove a customer or product, delete a document. For anything else, including a copy of your records or the closure of your account, write to us and we will act on it. We are a small team, so please give us a few working days.
9. Changes to this policy
If we change this policy we will update the date at the top of this page, and for significant changes we will notify you by email or in the app before the change takes effect.
10. Contact
Questions about privacy, or a request about your data: email zishconsulting@gmail.com or call +92 300 8018661.
