Invoice Maker - Invoice Fly

"We may transfer Personal Information to the following categories of recipients: Cloud Service Provider (Google Cloud) USA — Storage, Analytics, Security — Device Info, User Info; Analytics (Appsflyer, Mixpanel, Google Analytics, Smartlook) USA, Czech Republic — User analytics — Device Info, User Info; AI Providers (OpenAI, Replicate, Photoroom) USA, France — App features — User Info; Marketing Campaigns (MailChimp) USA — Email marketing and account alerts — User email."

User data including device info, user info, and email is shared with a wide range of third-party services across analytics, AI processing, marketing, customer support, and internal communications — at least 11 distinct third-party providers in total.

"Device Information: such as IP address, geographic location, operating system information, referral source, pages viewed and navigation paths on the website, device permissions, hardware information, browser type and version, identifiers and others. Localization & customization of the user experience for each specific device and location. To inform our product development. Marketing efforts and attribution."

The app collects device permissions, hardware information, and various identifiers beyond what an invoicing app would typically need, with purposes extending to marketing attribution and product development.

"Device Information: such as IP address, geographic location, operating system information, referral source, pages viewed and navigation paths on the website, device permissions, hardware information, browser type and version, identifiers and others. Localization & customization of the user experience for each specific device and location. To inform our product development. Marketing efforts and attribution."

Geographic location data is collected not only for localization but also for marketing efforts and attribution, which goes beyond what is necessary for an invoicing service.

"Analytics (Appsflyer, Mixpanel, Google Analytics, Smartlook) USA, Czech Republic — User analytics — Device Info, User Info. Device Information: such as IP address, geographic location, operating system information, referral source, pages viewed and navigation paths on the website, device permissions, hardware information, browser type and version, identifiers and others."

The use of Appsflyer (a mobile attribution platform), Google Analytics, Mixpanel, and Smartlook together — all receiving device info and user info — enables cross-service tracking and user profiling across platforms.

"This privacy policy may be modified from time to time to comply with applicable laws or to conform to our current business practices. We will post any changes to this on our Platform and, where required by law, will notify you via your contact email. We encourage you to revisit the Privacy Statement that is posted on our Platform from time to time to check for updates."

The policy can be changed unilaterally, with email notification only 'where required by law' — otherwise users are expected to check the website periodically to discover changes.

"Retention in case of queries: we will retain it for a reasonable period after the relationship between us has ceased in case of queries from you. Retention in case of claims: we will retain it for the period in which you might legally bring claims against us. Retention in case of job applications: your application data will be retained in our talent pool for a limited period... We also have a legitimate interest to store your data for a period of up to 6 years following the conclusion of an unsuccessful application."

Retention criteria use vague terms like 'reasonable period' and open-ended conditions like 'the period in which you might legally bring claims,' with no concrete deletion timelines. Job applicant data can be held for up to 6 years.