Your trust matters. This policy explains what data Enki Invoice collects, why, who we share it with, and the choices you have. This document is a general template and is not legal advice. You should have it reviewed by qualified counsel before relying on it.
1. Who we are
Enki Invoice ("we", "us") provides invoicing and practice-management software. This policy explains how we handle personal information when you use the Service. We act as a data controller for your account information and as a data processor for the client and invoice data you enter (see our Data Processing Addendum).
2. Information we collect
- Account data — name, email, and authentication details.
- Business data you enter — clients, invoices, contracts, timesheets, rate agreements, and settings.
- Voice recordings you submit for time-tracking transcription.
- Payment metadata — when you connect our payment processing provider, we receive status and identifiers (we never store full card numbers).
- Usage and device data — log data, IP address, and analytics events used to operate and improve the Service.
3. How we use information
- to provide, secure, and improve the Service;
- to transcribe voice notes and review contracts using AI features you trigger;
- to send transactional messages (e.g., invoice delivery, reminders) on your behalf;
- to detect, prevent, and respond to fraud, abuse, and security incidents; and
- to comply with legal obligations.
4. Legal bases (UK/EU GDPR)
Where the UK or EU GDPR applies, we process personal data on the bases of performance of a contract (providing the Service), legitimate interests (securing and improving the Service), consent (where required, e.g., certain cookies), and legal obligation.
5. Service providers and sub-processors
We share data with vetted providers only as needed to run the Service. We describe these providers by their function:
- Our cloud hosting and database provider: database, authentication, and storage.
- Our application hosting and content-delivery provider: application hosting and delivery.
- A privacy-focused analytics provider: product analytics.
- Our payment processing provider: payment processing.
- Our transactional email provider: transactional email delivery (invoices, reminders, alerts).
- An optional connection to your own email account: sending invoices from your own email account, only if you connect it.
- Our AI processing providers: voice transcription, timesheet parsing, and contract review.
- Our caching and rate-limiting provider: caching and rate limiting.
- Our error-monitoring provider: error monitoring.
The categories above are also reflected in our DPA. A current list of named sub-processors is available to customers on request. We require each provider to protect data consistently with this policy.
6. International transfers
Some providers process data outside your country. Where we transfer personal data internationally, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.
7. Data retention
We keep personal data for as long as your account is active and as needed to provide the Service, then for a limited period to meet legal, tax, and audit obligations. You can export or request deletion of your data as described below.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. Australian users have rights under the Privacy Act 1988 (Cth) and the Australian Privacy Principles; UK/EU users have rights under the GDPR; California users have rights under the CCPA/CPRA.
To exercise any right, contact hello@enkidigital.solutions. You may also lodge a complaint with your local supervisory authority (e.g., the OAIC in Australia or the ICO in the UK).
9. Security
We use row-level security to isolate each account's data, encrypt data in transit, restrict administrative access, and audit-log sensitive operations. No system is perfectly secure, but we work to protect your information and to notify you of incidents as required by law.
11. Contact
Questions about privacy? Email hello@enkidigital.solutions.