Privacy Policy

White Space Studios (“we”, “us”, or “our”) operates the website pdf-invoice-creator.com (the “Service”). We are committed to protecting your personal information and being transparent about how we collect, use, and share it.

This Privacy Policy explains our practices in accordance with the General Data Protection Regulation (GDPR), the Protection of Personal Information Act (POPIA), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

If you have any questions about this policy, please contact us at whitespacestudios404@gmail.com or +27 076 044 3207.

We collect the following personal information when you use our Service:

• Account information: Your name, email address, and profile picture, collected via Google Sign-In (OAuth 2.0) when you create an account.
• Invoice data: Business name, logo, contact details, addresses, and line item details that you enter when creating invoices.
• Client data: Names, email addresses, phone numbers, and addresses of your clients that you store in the Service.
• Usage data: Number of invoices generated, emails sent, and clients saved per billing period, used to enforce subscription tier limits.
• Subscription information: Your subscription tier, billing interval, and renewal date. Payment card details are handled exclusively by LemonSqueezy and are never stored by us.

We use your personal information for the following purposes:

• To provide and operate the Service, including generating PDF invoices and managing your account.
• To enforce subscription tier limits and manage billing via LemonSqueezy.
• To send invoice PDF attachments to your clients on your behalf via our email service (Resend), when you use the email feature.
• To autofill your issuer details and client details to improve your experience when creating repeat invoices.
• To respond to your support enquiries.

We share your data with the following third-party service providers who process it on our behalf. All providers are bound by Data Processing Agreements and implement appropriate technical and organisational security measures.

• Supabase (supabase.com) — Provides our database, authentication infrastructure, and file storage. Your account data, invoice data, and uploaded logos are stored on Supabase servers located in the EU (Ireland and Germany). Privacy policy
• Google (Google OAuth) — We use Google Sign-In to authenticate users. When you sign in with Google, Google shares your name, email address, and profile picture with us. We do not receive or store your Google password. Privacy policy
• LemonSqueezy (lemonsqueezy.com) — Acts as our Merchant of Record and processes all subscription payments. LemonSqueezy handles billing, tax compliance, and payment card data. We never receive or store your payment card details. Privacy policy
• Resend (resend.com) — Provides our transactional email infrastructure. When you use the email feature to send an invoice to a client, Resend transmits the email and PDF attachment on your behalf from our platform address. Privacy policy

Your personal data is stored on Supabase servers located in Ireland and Germany (EU). We implement strict access controls, and access to your personal data is limited to authorised systems and personnel with a legitimate business need. All data is transmitted over encrypted connections (HTTPS/TLS).

We retain your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or tax compliance purposes.

We use only essential cookies necessary to operate the Service, including authentication session cookies managed by Supabase. We do not use advertising, tracking, or third-party analytics cookies.

Depending on your location, you may have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): Request a copy of the personal data we hold about you.
• Right to rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR): Request deletion of your personal data.
• Right to data portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): Object to processing of your personal data.
• Right to lodge a complaint (Art. 77 GDPR): Lodge a complaint with your local supervisory authority.

To exercise any of these rights, contact us at whitespacestudios404@gmail.com. We will respond within the timeframes required by applicable law.

California residents have additional rights under the CCPA, including the right to know what personal information we collect and why, the right to delete personal information, the right to correct inaccurate information, and the right to non-discrimination for exercising these rights.

We do not sell personal information. To exercise your CCPA rights, contact us at whitespacestudios404@gmail.com.

White Space Studios is based in South Africa and complies with the Protection of Personal Information Act (POPIA). You have the right to access, correct, and request deletion of your personal information. You may also object to the processing of your personal information.

To exercise these rights, contact us at whitespacestudios404@gmail.com or +27 076 044 3207. You have the right to lodge a complaint with the Information Regulator of South Africa.

Your data is stored in the EU (Ireland and Germany) via Supabase. Where data is transferred internationally (for example, via Google or LemonSqueezy), we ensure such transfers comply with GDPR, POPIA, and other applicable laws, including through the use of Standard Contractual Clauses where required.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated effective date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

If you have any questions or concerns about this Privacy Policy, please contact us:

• Email: whitespacestudios404@gmail.com
• Phone: +27 076 044 3207
• Website: pdf-invoice-creator.com