Privacy Policy

Last updated: February 2026

What we collect

Milo collects only the information necessary to provide our service. When you create an account, we store your email address, name, and a hashed password. When you use the app, we store the business profile details, brand settings, and invoices you create. All data is stored securely in Supabase with row-level security enabled.

How we use your data

Your data is used exclusively to provide the Milo service — creating, managing, and sharing invoices. We do not sell your data, use it for advertising, or share it with third parties except as required to operate the service (hosting, email delivery).

Shared invoices

When you share an invoice, a unique link is generated. Anyone with that link can view the invoice and the business details shown on it (company name, address, email). You can control sharing on a per-invoice basis.

Data storage & security

All data is stored in Supabase (powered by PostgreSQL) with row-level security policies that ensure users can only access their own data. Passwords are hashed using bcrypt. All connections are encrypted via TLS. We do not store payment information.

Your rights

You can export, modify, or delete your data at any time. To permanently delete your account and all associated data, go to Settings → Delete account. Upon deletion, all workspaces, invoices, and shared links are permanently removed. If you are in the EU, you have additional rights under GDPR including data portability and the right to erasure.

Cookies

Milo uses only essential cookies required for authentication (session tokens). We do not use analytics cookies, tracking pixels, or third-party advertising cookies.

Contact

If you have questions about this privacy policy or want to exercise your data rights, please contact us at privacy@invoicestudio.app.