Legal

Privacy Policy

Effective date: October 21, 2026

1. Scope

This Privacy Policy applies to the Invoicer website, desktop application, and CLI tools operated by Milad Fahmy ("Invoicer", "we", "us", "our"). It explains how information is handled when you use our software and website.

2. Information You Provide

You may choose to provide business and invoice-related data, including:

3. Local-First Data Model

Invoicer is designed as a local-first product. Core app and CLI data is stored in local files on your device and/or in your selected workspace paths. We do not operate a required account backend for core invoice data at this time.

You are responsible for securing your device, workspace, and backups.

Optional AI and MCP Connections

When you connect an external assistant, requested client, time-entry, invoice and PDF data is shared with your chosen AI provider under its policies. Local MCP uses a process on your computer. It excludes email credentials from normal tool results. Your desktop client controls local tool approvals.

Web connections require an optional relay operated by you or your chosen provider. Requested data passes through relay memory; authorization records are stored there. The included relay stores registered client metadata, workspace identity hashes, grants and hashed token indexes. Pairing expires after ten minutes, authorization codes after one minute, access tokens after one hour and refresh tokens after thirty days. Expired records are removed periodically. Disconnect attempts remote revocation; an offline relay may retain authorization records until reachable or expired. Hosting providers may retain connection logs under their own policies. No Invoicer-hosted relay is currently offered.

MCP write-retry records are saved in your local workspace and follow your workspace retention and backup choices.

4. Email and SMTP Handling

If you configure SMTP or send email through connected providers, your credentials and message data are handled through your selected email provider infrastructure. You are solely responsible for the legality, recipient consent, and content of messages sent using the product.

5. Website Requests and Third-Party Services

The landing page may request public data from third-party services, such as GitHub release metadata and npm download counts, and may link to external services such as Ko-fi. Those services process data under their own policies and terms.

6. Cookies and Tracking

We do not currently run first-party analytics cookies or a first-party behavioral ad tracking stack on the landing page. Third-party services you open may use their own cookies and tracking technologies.

7. Data Retention and Your Control

Because primary data is stored locally, retention is generally controlled by you. You can edit, export, move, or delete local files subject to your own backup and legal obligations.

8. International Users

You may access Invoicer from different jurisdictions. You are responsible for complying with your local laws, including privacy, tax, accounting, and communications regulations that apply to your use.

9. Security Disclaimer

No method of transmission or storage is completely secure. To the maximum extent permitted by law, we disclaim guarantees regarding absolute security, uninterrupted service, or error-free operation.

10. Children and Minimum Age

Invoicer is not directed to children under 16. By using the service, you represent that you are at least 16 years old and have legal capacity under applicable law.

11. Changes to This Policy

We may update this Privacy Policy at any time by posting a revised version at this URL and updating the effective date. Continued use after updates means you accept the revised policy.

12. Contact

Legal and privacy notices: support@inbrief.sh

This policy is provided for operational transparency and does not constitute legal advice.