Privacy policy
Last updated 17 October 2026
This policy explains what personal information leed. Invoices collects, why we collect it, who handles it and what your rights are. leed. Invoices is an invoicing service for Australian service businesses, run from Sydney, New South Wales. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
1. Who we are
In this policy, “leed. Invoices”, “we” and “us” mean the operator of the leed. Invoices website and app. “You” means a person who signs up to leed. Invoices to send invoices. Your “clients” are the people or businesses you invoice using leed. Invoices. You can reach us at support@leedinvoices.com.
2. What we collect
We collect the following information.
- Your account. The email address you sign in with. We do not use passwords: we email you a one-time sign-in link and an 8-digit code, and either one signs you in.
- Your business details. Business name, ABN, address, logo, GST setting, and the bank account details (account name, BSB and account number) you choose to show on invoices so clients can pay you.
- Your clients’ details. Names, email addresses and postal addresses that you enter about the people and businesses you invoice.
- Your invoices. Invoice content (line items, amounts, dates, notes), invoice numbers and status (draft, sent, paid, void). We generate the PDF from this content when an invoice is sent or viewed; we do not keep a separate copy of the PDF.
- Billing information. If you upgrade to a paid plan, your subscription status and plan. Card details are entered directly with Stripe and never reach our servers.
- Usage and security logs. Technical records such as the time of sign-ins and requests, IP address, browser type, and errors, and a count of the invoice emails each account sends, which we use to apply abuse limits. We use one cookie to keep you signed in, a short-lived one that remembers your email while you type in a sign-in code, and your light or dark choice is stored on your own device. We do not use advertising or cross-site tracking cookies.
- Messages to us. Anything you send to our support address.
When one of your clients clicks “I’ve paid” on the payment page, we record that against the invoice so you can see it. We do not ask your clients to create an account.
3. Why we collect it
- To provide the service: create and send invoices, generate PDFs, show the payment page to your clients, and keep your records.
- To sign you in and keep your account secure, including detecting and preventing misuse and emailing you a notice when your bank details change.
- To take payment for paid plans and manage your subscription.
- To send service messages such as sign-in links and codes, invoice emails you ask us to send, overdue reminders to your clients if you have them switched on (a paid-plan feature), and important changes to the service.
- To respond to support requests, fix problems and improve leed. Invoices.
- To meet our legal obligations.
We only use your information for these purposes, or for a related purpose you would reasonably expect, unless you agree otherwise or the law requires or allows it.
4. Who handles your information
We use a small number of trusted providers to run leed. Invoices. Each one only receives what it needs to do its job.
| Provider | What it does for us |
|---|---|
| Neon | Hosts our database, where your account, business, client and invoice records are stored. |
| Netlify | Hosts and serves the website and app, and handles the web requests that reach it. |
| Resend | Sends email on our behalf: sign-in links and codes, the invoice emails you send to your clients, and overdue reminders if you turn them on (including the recipient’s email address and the invoice contents). |
| Stripe | Processes subscription payments for paid plans. Stripe holds your card details and billing records and is responsible for its own handling of them under its own privacy policy. |
We may also disclose information if the law requires it (for example a court order), to protect the rights, safety or property of leed. Invoices or others, or to a successor if the service is ever sold or transferred, in which case this policy will continue to apply to your information.
The mobile apps
The iPhone and Android apps are a shell around the same service, so everything in this policy applies to them. They do not add advertising or tracking, and they ask for no device permissions beyond what the app needs to save and share an invoice PDF. Purchases and subscriptions are never made inside the apps; they are made on our website.
5. We do not sell your data
We do not sell, rent or trade personal information, and we do not use your clients’ details for our own marketing. Invoices sent from leed. Invoices may carry a small “Sent with leed.” line on the free plan; this does not share any personal information.
6. Your clients’ information is your responsibility
When you enter your clients’ names, email addresses and addresses into leed. Invoices, you are the one collecting that information from them and deciding how it is used. We hold it and process it on your behalf, only to provide the service to you. You are responsible for having the right to give it to us, for letting your clients know you keep and use their details to invoice them, and for responding to any requests they make to you. If a client of yours contacts us directly about their information, we will refer them to you where appropriate.
Anyone who has the link to one of your invoices can view it, including your business and bank details shown on it. Share invoice links only with the person you are invoicing.
7. How long we keep it
We keep your information for as long as your account is open and for a short period afterwards so we can handle any problems. You can delete your account and the information in it yourself at any time: in the app, go to Settings and choose Delete my account. You can also email support@leedinvoices.com and we will act on a verified request within 30 days. We may keep limited records for longer where the law requires it (for example our own billing records), or where we need them to resolve a dispute or enforce our terms, and we delete or de-identify them when they are no longer needed.
Please note that Australian tax law generally expects you to keep your own business records, including invoices, for five years. Ask us for a copy of your data before you ask for deletion if you need to keep your invoices.
8. How we protect it
- Connections to leed. Invoices are encrypted in transit (HTTPS).
- Sign-in uses single-use, time-limited email links and codes, and sessions are held in a signed, encrypted, HTTP-only cookie.
- Every record is tied to your business, and the app only returns records belonging to the business you are signed in to.
- Our providers maintain their own security programs and certifications. We limit who can access production systems and keep secrets out of our code.
No system is completely secure. If we become aware of a data breach that is likely to cause serious harm, we will notify the people affected and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
9. Information sent overseas
Some of our providers store or process information outside Australia, including in the United States and other countries where they or their sub-processors operate. This means your information, and your clients’ information that you enter, may be held overseas. We take reasonable steps to make sure these providers handle personal information consistently with the Australian Privacy Principles, for example by using reputable providers with published security and privacy commitments. By using leed. Invoices you understand that your information may be handled in these locations.
10. Access, correction and complaints
You can ask to see the personal information we hold about you, or ask us to correct it, by emailing support@leedinvoices.com. We may need to confirm your identity first, and we will respond within a reasonable time, normally within 30 days. You can also update most of your details yourself in the app. We will not charge you for making a request, and if we cannot give you access or correct something we will tell you why in writing.
If you think we have mishandled your personal information, email us at support@leedinvoices.com with the details and we will investigate and reply in writing. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
11. Changes to this policy
We may update this policy from time to time. We will change the “Last updated” date at the top and, for significant changes, tell you by email or in the app.
12. Contact
Questions about this policy or your information: support@leedinvoices.com.