I
Invoice Maker
Hugo Software

Privacy Policy

Last updated: 25 August 2026

Invoice Maker (invoice.bnj.app) is operated by Hugo Software. This page explains, in plain terms, what happens to your data.

The short version

Your invoices never reach us. Everything you type into Invoice Maker — your own details, your client's details, line items, prices, notes, payment details and any logo you add — is processed entirely inside your web browser. There is no endpoint on our servers that accepts invoice data. This is a property of how the tool is built, not a promise about how we behave.

What stays in your browser

The following is stored in your browser's local storage on your own device, and nowhere else:

  • the invoice you are currently editing (so you do not lose it when you close the tab);
  • your own sender details, so they are already filled in next time;
  • saved clients and the invoice archive (Pro features);
  • your interface language, light/dark preference and, if you have one, your licence code.

Clearing your browser's site data deletes all of it permanently. We cannot restore it, because we never had a copy. A second computer or a different browser starts empty.

What our server stores

The only thing our backend keeps is a licence record, created when a subscription starts:

  • the licence code (format BNJ-XXXXXXXX);
  • the subscription status, plan, Stripe price id, current period end and which apps the licence covers;
  • the Stripe customer id.

There are no accounts, no passwords and no email addresses. We deliberately do not store your email address, even though Stripe collects one for billing.

Payments

Payments are handled by Stripe. Card details are entered on Stripe's own checkout page and never pass through our servers. Stripe processes that data as an independent controller under its own privacy policy (stripe.com/privacy). We receive only the identifiers listed above.

Analytics

We use a self-hosted installation of Umami (uma.bnj.app) to count page views. It is cookieless, collects no personal data and no cross-site identifiers, and stores aggregate figures only: page views, referrer, country, browser and device type. It cannot see anything you type into the invoice.

What we do not do

  • No advertising SDKs, no third-party trackers, no data brokers.
  • No selling or sharing of personal data.
  • No requests to Google Fonts, CDNs or any other third-party host — the page and its fonts are served from our own domain.
  • No profiling and no automated decision-making.

Legal bases (GDPR / KVKK)

Where the GDPR or Turkish KVKK applies, we rely on: performance of a contract for the licence record required to give you access to Pro, and legitimate interest for cookieless aggregate analytics and for keeping the service secure and operational.

Your rights

You may ask us what licence data we hold, ask for it to be corrected, or ask for it to be deleted. Because a licence code is the only identifier we have, please quote it in your request. Deleting the licence record ends access to Pro on that code. Data stored in your browser is under your own control and can be removed at any time by clearing site data for invoice.bnj.app.

Children

Invoice Maker is a business tool and is not directed at children.

Retention

Licence records are kept while the subscription is active and for as long as we are required to keep billing records afterwards. Analytics data is aggregate and kept indefinitely in that aggregate form.

Changes

If this policy changes, the date at the top of this page changes with it.

Contact

Questions or requests: [email protected]