Legal

Privacy

Last updated 5 November 2026

The short version

• No account needed, no tracking, no ads. No cookies unless you sign in.
• If you just download a PDF, we don't store your invoice. It is processed in memory to draw the page and then discarded.
• If you turn on the online link, we store that invoice for 30 days so the link works, then delete it. You can turn the link off at any time and the invoice is erased straight away.

What happens to your data

While you edit

Your draft is kept in your browser (local storage) so it survives a reload. It is not sent anywhere until the preview is drawn: each change is sent to our server, which lays out the page and sends back the picture. We don't keep or log those requests.

When you download a PDF without a link

The invoice is sent to our server, turned into a PDF and returned to you. Nothing is stored.

When you include an online link

We store the invoice (including your logo) behind a long random link. Anyone who has the link can see the invoice, so share it only with your client. You also get a private edit link: whoever has it can change or turn off the invoice. We store only a fingerprint (hash) of that edit key, not the key itself.

Saved invoices are deleted 30 days after the last change. Turning a link off erases the invoice immediately; the address then shows that it was turned off until it expires.

If you create an account

Accounts are optional. We store your email address, when you joined and when you last signed in. To sign in we email you a one-time link; it works for 15 minutes and we keep only a fingerprint (hash) of it. Signing in sets one cookie, opi_session, that keeps you signed in for 30 days; it's needed for the account to work and is not used for anything else. Signing out deletes it.

While you're signed in, the invoices you download are saved to your account (with your logo) so you can find, reopen and duplicate them. They are private to you unless you turn on the online link or QR code. They stay until you delete them from your invoice list.

What we don't collect

We don't use analytics scripts, advertising or tracking cookies. We keep anonymous daily counts (for example, how many invoices were created on a given day) with no addresses or identifiers attached. To limit abuse we count how often each network address saves invoices; that count lives only in the server's memory and is forgotten within an hour.

Who processes data for us

• Cloudflare runs our network: every request passes through it on the way to our server.
• Turso hosts the database where online invoices and accounts are stored (in the United States).
• Cloudflare Email Service delivers sign-in emails.

Payment links on an invoice go to whatever payment provider the sender chose; we don't see or handle payments.

Your choices

You can turn off any link you created from the editor (or with the API), which erases the invoice. To clear your draft, use “Start over” in the editor or clear your browser's site data. Questions about your data: [email protected].