Last updated: September 4, 2026
This Privacy Policy explains what information Invopap - a product built, developed and maintained by QIANG AVANCEE TECHNOLOGIES LTD - collects, how we use it, and the choices you have. It covers both the business information you enter into the Service, and the information we collect about you as a visitor or account holder.
Account & business information: business name and address, owner and staff names, titles, phone numbers and email addresses, login usernames, and the business records you choose to store - customers, suppliers, products, invoices, expenses, payroll and staff records, contracts, and similar.
Uploaded files: logos, staff photos, chat attachments, and contract documents you upload.
Usage information: basic request logs (page requested, timestamp, status) used for reliability and security monitoring, not for tracking individuals across other sites.
Payment information: if you pay by card or mobile money, your payment details are collected and processed directly by our payment provider (Flutterwave) - we never see or store your card number or mobile money PIN. We receive confirmation that a payment succeeded and its amount/reference.
To provide the Service (generating your documents, running payroll calculations, sending the notifications you've configured); to communicate with you about your account (billing, security, support); to maintain security and prevent abuse (rate limiting, fraud prevention); and to improve the Service (aggregated, non-identifying usage patterns).
We do not sell your data, and we do not use your business data to train external AI models or share it with other businesses on the platform.
We share data only where needed to run the Service:
We don't share your data with anyone else, except where required by law.
We keep your data for as long as your account is active. If you close your account, we'll delete or anonymize your data within a reasonable period, except where we're required to retain it for legal, tax, or security purposes.
We use industry-standard measures to protect your data, including encrypted connections, hashed passwords, and access controls limiting who can see your business's data to your own logins. No system is perfectly secure, and we can't guarantee absolute security.
We use a small number of essential cookies - to keep you logged in, and to protect forms against cross-site request forgery. We don't use advertising or cross-site tracking cookies.
You can access, correct, or delete most of the data in your account directly within Invopap. You can request a copy of your data or ask us to delete your account by contacting us. Note that deleting your account deletes the business records stored in it - export anything you need first.
We'll update the "Last updated" date above when this policy changes, and let you know about material changes by email or an in-app notice where practical.
Questions about this policy, or requests relating to your data, can be sent to the contact details on our homepage.
This document is a general-purpose template and hasn't been reviewed by a lawyer. Before relying on it for a live product handling real customer data and payments, have it reviewed by a lawyer familiar with Ugandan data protection law (the Data Protection and Privacy Act) and any other jurisdictions your customers are in.
