Who we are
Invoixa (“we,” “us,” “our”) provides a tax estimation and expense-categorization tool for Canadian freelancers and self-employed individuals (“you,” “users”).
What we collect
- Account information: email address, and any name you provide.
- Financial data you provide: income and expense figures you enter manually, and/or transaction data extracted from bank/credit card statements you choose to upload.
- We do not store your original uploaded statement file. Your statement is processed to extract transaction data (dates, merchant names, amounts) and the original file is discarded immediately after processing. Only the extracted, categorized data is retained.
- We never request or store your online banking credentials, account numbers, or any information that would allow access to your actual bank or credit card account.
How we use your data
- To calculate tax estimates based on the income, expenses, and province you provide.
- To categorize and display your transactions for your review.
- To maintain your account and provide the service to you.
- We do not sell your personal information to third parties.
- We do not use your financial data to train AI models beyond what is necessary to provide you the service in the moment you use it.
Third parties who process your data
To provide the service, we share data with the following processors, solely to deliver the features you use:
- Anthropic (Claude API) — processes statement content transiently to extract transaction data. Anthropic does not retain your uploaded statement after processing, consistent with their API data usage policies.
- Supabase — hosts our database (categorized transaction data, account information, tax estimates), located in Canada (Supabase, Canada Central).
- Stripe — processes subscription payments. Card details go directly to Stripe; we never see or store them.
Your rights
You may, at any time:
- Request a copy of the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and associated data.
- Withdraw consent for us to process your data, understanding this may mean we can no longer provide the service to you.
To exercise these rights, contact us at hello@invoixa.com.
Data retention
We retain your account information and extracted transaction/tax data for as long as your account is active. If you delete your account, this data is permanently removed, typically within 30 days. As noted above, original uploaded statement files are never retained at all — they are discarded immediately after processing, regardless of account status.
Data security
We use industry-standard encryption in transit and at rest. While we take reasonable steps to protect your information, no online service can guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you and the applicable privacy regulator as required by law.
Compliance
We aim to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.
Changes to this policy
We may update this policy from time to time. Material changes will be communicated to you via email or in-app notice.