What we collect, why, and how you can control it.
From you (the seller): your name, email, password (stored as a salted hash, never in plain text), organization name, currency, country, tax ID, business address, a logo emoji, your chosen brand color and invoice template, your PayPal payout email (for receiving customer payments), and your bank transfer details if you provide them. From your customers: only what you choose to collect per invoice from name, email, company, address, tax ID, phone number, PO number, and notes - tied to that specific invoice.
Solely to operate the invoicing workflow: generating and rendering your invoices, letting your customer view and pay them, sending transactional emails (invoice submitted, invoice paid, welcome/verification, receipts, contact form), and running your own PayPal Subscriptions billing for your Cosmobill plan. We don't use your data, or your customers' data, for advertising, and we don't run any analytics or tracking scripts on the site.
We never sell your data or your customers' data. We never see or store card numbers, bank login credentials, or PayPal passwords - PayPal handles all of that on its own systems. For PayPal payments, we only see the payment status and metadata PayPal returns to confirm an order was completed. For bank transfers, we only store the payment instructions you typed in and a "customer says they paid" flag you personally confirm; we have no access to either party's actual bank account.
Invoice and customer data submitted on an invoice is visible only to you (the seller who created it) and the customer who submitted it. We don't share it with other sellers, other customers, or third parties, except the minimum necessary to process a payment (PayPal) or send an email (Cloudflare Email).
You can permanently delete your entire account and all associated data - your seller profile, sessions, and every invoice you've created - at any time from Settings → Account. This deletion is immediate and irreversible; once submitted, we cannot recover the data. If you'd like a copy of your data, or want a specific customer's submitted details removed from an invoice rather than deleting your whole account, open a support ticket and we'll handle it manually.
We keep your account and invoice data for as long as your account exists, so your invoice history and dashboard stay accurate. There's no automatic expiry - data is retained until you delete your account (or a specific record, on request) as described above. Session tokens expire automatically after 30 days of inactivity.
All data is stored in Cloudflare D1 (a globally distributed SQL database) and served from Cloudflare's edge network. Traffic to and from Cosmobill is encrypted in transit via TLS.
Questions about this policy or a request to access, correct, or delete your data? Contact us.