Sign in
Sign in
Invly is an online invoice management platform designed for UK freelancers and small businesses. The service is accessible at invly.co.uk.
For the purposes of data protection law, invly acts as the data controller for personal data you provide when creating an account and using the platform.
If you have any questions about how we handle your data, you can contact us at: info@invly.co.uk
We collect data in two ways: information you provide directly, and information collected automatically when you use the service.
| Category | Data collected | When |
|---|---|---|
| Account data | Email address, password (hashed), account creation date | On registration |
| Company profile | Company name, address, phone, VAT/tax number, bank details, company logo | When you fill in your profile |
| Invoice data | Invoice numbers, line items, amounts, dates, client details, notes | When you create invoices |
| Client data | Client name, address, email, phone number | When you add clients |
| Payment data | PayPal subscription ID, subscription status (we do not store card numbers) | On Premium upgrade |
| Usage data | Pages visited, actions taken, browser type, IP address (anonymised) | Automatically during use |
| Support data | Messages sent via the contact/ticket system | When you contact support |
We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data.
We use your personal data for the following purposes:
We do not sell your personal data to third parties. We do not use your data for advertising profiling.
Under UK GDPR, we process your personal data on the following legal bases:
| Processing activity | Legal basis |
|---|---|
| Providing the invoice management service | Performance of a contract (Art. 6(1)(b)) |
| Processing payments via PayPal | Performance of a contract (Art. 6(1)(b)) |
| Sending invoices to your clients by email | Performance of a contract (Art. 6(1)(b)) |
| Security and fraud prevention | Legitimate interests (Art. 6(1)(f)) |
| Service improvement and analytics | Legitimate interests (Art. 6(1)(f)) |
| Legal obligations (e.g. financial records) | Legal obligation (Art. 6(1)(c)) |
We only share your data with trusted third parties where necessary to operate the service:
| Third party | Purpose | Location |
|---|---|---|
| PayPal | Processing subscription payments | USA (EU-US data framework) |
| Hosting provider (fasthosts.co.uk) | Server infrastructure and file storage | EU |
| SMTP email provider (livemail.co.uk) | Sending invoice emails and password resets | UK |
We do not share your data with marketing companies, data brokers, or any unauthorised third parties. Your invoice data and client data are never shared outside of what is necessary to deliver the service you requested.
We may disclose personal data if required by law, court order, or to protect the rights, property, or safety of invly, our users, or the public.
We retain your personal data for as long as your account is active and for a reasonable period afterwards to meet legal and financial obligations:
| Data type | Retention period |
|---|---|
| Account and profile data | Until account deletion, plus up to 30 days for backup purposes |
| Invoice and financial data | 6 years from invoice date (UK tax record requirements) |
| Client data | Until you delete the client or your account |
| Payment records | 6 years (UK financial record requirements) |
| Support tickets | 2 years from closure |
| Usage/log data | Up to 90 days |
When you delete your account, we permanently delete your personal data within 30 days, except where we are required to retain it by law (e.g. financial records).
Under the UK GDPR, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at info@invly.co.uk. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been handled unlawfully: ico.org.uk
invly uses a small number of essential cookies to operate the service. We do not use advertising cookies or third-party tracking cookies.
| Cookie name | Purpose | Type | Duration |
|---|---|---|---|
| PHPSESSID | Maintains your login session | Essential | Session |
| PayPal SDK cookies | Required for PayPal payment buttons to function | Functional | Session / 1 year |
We do not use Google Analytics, Facebook Pixel, or any other behavioural tracking tools. No third-party advertising cookies are ever set on invly.co.uk.
We take the security of your data seriously and implement appropriate technical and organisational measures, including:
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you via the dashboard announcement system or by email.
The date at the top of this page shows when the policy was last updated. Continued use of invly after a policy update constitutes acceptance of the revised terms.
Previous versions of this policy are available on request by emailing info@invly.co.uk.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please get in touch:
You may also raise a complaint with the UK supervisory authority: