PRIVACY POLICY
Invoice App
IMPORTANT PRIVACY INFORMATION
Invoice App is an iOS application that lets you create and manage invoices and estimates, maintain client and item information, record invoice status, add payment instructions and supporting materials, and send or share invoice documents through services available on your device. The App is free to download and may offer paid functionality through subscriptions and in-app purchases available through Apple.
When you create or manage invoices, estimates, clients or related records, the App processes the information you choose to enter or add as necessary to provide the requested functionality. Core invoice, client and related content is maintained within the App; Orvanta does not operate a backend content store for this core invoice-management data. The Service can operate without a conventional user account.
The App may help you record invoice status and payment instructions, but it does not itself process client payments or verify whether an invoice has been paid. When you choose to send or share an invoice, estimate, reminder or related file, the App may make the relevant content available to the communication or sharing service you select. Orvanta does not operate a backend delivery or message-tracking service for this functionality.
We also receive or process technical and service-related information such as device and advertising identifiers, IP address and approximate location, device and app information, usage and event information, attribution data, purchase and transaction information, crash logs, diagnostics and support communications. We use this information to operate and secure the Service, manage paid access, provide support, understand product performance, improve features and measure paid-acquisition campaigns.
Invoice App does not display third-party advertisements inside the App. We may nevertheless advertise the App through external platforms and use attribution and advertising-measurement technologies to understand which campaigns lead to installs, trials, purchases, subscriptions or other relevant events.
BY USING THE SERVICE, YOU PROMISE US THAT (I) YOU HAVE READ, UNDERSTAND AND AGREE TO THIS PRIVACY POLICY, AND (II) YOU ARE OVER 16 YEARS OF AGE (OR HAVE HAD YOUR PARENT OR GUARDIAN READ AND AGREE TO THIS PRIVACY POLICY FOR YOU) AND (III) ACCEPT OUR DATA COLLECTION AND PROCESSING PRACTICES DESCRIBED BELOW. If you do not agree, or are unable to make this promise, you must not use the Service. In such case, you must (a) contact us and request deletion of data that we control; (b) cancel any subscriptions using the functionality provided by Apple; and (c) delete the App from your devices.
To learn more about the information we collect or process, see Section 2; for the purposes of processing, see Section 3; for the parties with whom information may be shared, see Section 5; and for your privacy rights, see Section 6. Questions and privacy requests may be sent to support@orvanta.limited.
PRIVACY POLICY
This Privacy Policy explains how Orvanta Digital Limited (“Orvanta”, “we”, “us” or “our”) collects, uses, stores, discloses and otherwise processes personal data when you use the Invoice App mobile application (the “App”) and the services and features made available through it (together, the “Service”).
Translations of this Privacy Policy may be provided for convenience. If a translated version differs from the English version, the English version will prevail to the extent permitted by applicable law.
Definitions
In this Privacy Policy, “personal data” or “personal information” means information that identifies, relates to, describes or can reasonably be linked to an individual or household, as defined under applicable law. “Process” includes collecting, using, storing, accessing, analyzing, transmitting, disclosing and deleting information. “Invoice Content” means business, client, invoice, estimate and related information or materials that you choose to create, enter, maintain, attach, send or otherwise use through the Service.
TABLE OF CONTENTS
2. Categories of Personal Data We Collect
3. Purposes for Which We Process Personal Data
4. Legal Bases for Processing Personal Data (EEA and UK Users)
8. International Data Transfers
9. How We Protect Your Personal Data
11. Changes to This Privacy Policy
12. U.S. States Privacy Notice
1. PERSONAL DATA CONTROLLER
Orvanta Digital Limited, a company registered under the laws of Cyprus under registration number HE 496479, with its registered office at Zinonos Kitieos, 15, Ypsonas, 4187, Limassol, Cyprus, is the controller of personal data processed for the purposes described in this Privacy Policy.
Certain third parties, such as Apple, communication services or advertising platforms, may act as independent controllers for specific processing that they determine themselves. Their processing is governed by their own privacy notices. Where a provider processes personal data on our behalf, we use the provider for the limited functions described in this Policy and under the contractual arrangements applicable to that service.
2. CATEGORIES OF PERSONAL DATA WE COLLECT
We process information that you provide or make available through the features you choose to use, information generated automatically when you use Invoice App, and limited information received from Apple and other service providers. The categories involved depend on the features you use, your device and privacy settings, your purchase or subscription status, and the information you choose to maintain in the App.
2.1. Information you provide or make available directly
2.1.1. Business, client, invoice and estimate information
When you create or manage invoices, estimates, clients or related records, the App processes the information you choose to enter or add as necessary to provide the requested functionality. This may include business and client information, invoice or estimate details, item or service information, amounts, dates, taxes, discounts, payment instructions, status information, notes and other fields or materials you choose to use. Core invoice, client and related content is maintained within the App and is not stored by Orvanta in a backend content store as part of the ordinary invoice-management functionality.
2.1.2. Client and third-party information
The App allows you to maintain information about clients or other persons in connection with invoices and estimates. Depending on what you choose to enter, this may include a client name, contact information, email address, phone number, address, tax or other identification information, private notes and other information relevant to your records. You are responsible for ensuring that you are authorized to use information relating to other people and for providing any notices or obtaining any permissions required by applicable law.
2.1.3. Tax, identification and payment information
The App may allow you to include tax or other identification information in business, client or invoice records. Depending on how you use the relevant field, this information may include a tax identification number, Social Security number or another identifier. The App may also allow you to include payment instructions or payment-method information, such as bank-transfer details or other information you choose to provide to a client. The App does not itself process client payments or verify the information you enter for these purposes.
2.1.4. Attachments and supporting materials
You may be able to add a logo, image, attachment, stamp or other supporting material to an invoice, estimate or related record. The App processes the material you choose to add as necessary to provide the relevant feature. Depending on the material, it may contain personal, confidential or sensitive information.
2.1.5. Purchase and subscription information
Payments for Invoice App subscriptions and in-app purchases are processed through Apple. We do not receive or store your full payment-card number. We may receive limited transaction and entitlement information such as the product selected, price and currency, purchase or restore status, subscription status, renewal or expiration status, transaction or receipt identifiers, purchase date, trial status, and refund or cancellation information where Apple makes it available. RevenueCat may help us receive and manage subscription and purchase-entitlement information.
2.1.6. Communications, support and feedback
If you contact us, we may process your email address or other contact details, the content of your message, attachments you choose to provide, relevant invoice or transaction information you voluntarily include, technical context, troubleshooting information and our response history.
2.2. Information we receive from third parties
2.2.1. Apple
When you make an App Store purchase, Apple may provide us with transaction, receipt, subscription, purchase and entitlement information under its own terms and your Apple settings.
2.2.2. Analytics, attribution and other providers
Our analytics, diagnostics, attribution, advertising and subscription-management providers may return information generated from their services, such as campaign attribution, installation or event identifiers, purchase or subscription status, crash or performance information, analytics results, fraud or security signals and advertising-measurement information. We use that information for the purposes described in Section 3.
2.3. Information collected automatically
2.3.1. Referral, attribution and campaign information
We may record the advertisement, campaign, link, application or other source that referred you to Invoice App, together with AppsFlyer or other attribution identifiers, campaign parameters, attribution results and related conversion events. This helps us understand which campaigns lead to installs, trials, purchases, subscriptions or other relevant events.
2.3.2. Device, network and approximate-location information
We may collect IP address; device type and model; operating-system version; language and time zone; memory and carrier information; app version and build; permission status; and other technical characteristics made available by your device or integrated SDKs. We may infer an approximate country, region or city from an IP address. We do not collect precise GPS location for the ordinary processing described in this Policy unless a specific feature requests it and you grant the relevant permission.
2.3.3. Usage and product-event data
We record information about how you interact with the Service, such as screens viewed, features used, session duration, invoice or estimate creation events, purchase or restore events and other product interactions used to operate, analyze and improve the App. Ordinary product-event logging focuses on interaction and technical events rather than the detailed contents of your invoice or client records.
2.3.4. Advertising and device identifiers
Depending on your device, platform, SDK configuration, settings, consent choices and applicable law, we and our providers may receive identifiers such as IDFA, IDFV, AAID, App Set ID, Firebase installation identifiers, AppsFlyer identifiers and other SDK-generated identifiers where available. We use these identifiers for analytics, attribution, fraud prevention and advertising measurement. Where Apple’s App Tracking Transparency framework requires permission, tracking that requires such permission is subject to your choice.
2.3.5. Crash logs, diagnostics and performance data
We collect crash reports, error logs, diagnostic information, performance measurements and technical context needed to identify and resolve failures, maintain reliability and protect the Service. This may include app version, device and operating-system information, timestamps, error codes and information about the feature being used when a problem occurred.
2.4. Sensitive and special-category information
Invoice Content or support materials you choose to provide may contain personal, confidential or sensitive information. In particular, tax or identification fields may contain information that applicable law treats as sensitive, depending on what you choose to enter. The App processes such information only as necessary to provide the feature you request or where otherwise permitted by applicable law. We do not use Invoice Content to infer sensitive characteristics about you or others for unrelated purposes.
2.5. Sources of personal data
The sources of personal data described in this Policy include: (a) you, when you create or maintain records, make a purchase, choose to share content or contact support; (b) information about clients or other people that you choose to enter into the App; (c) your device and use of the App; (d) Apple, in connection with App Store purchases; and (e) analytics, advertising, attribution, diagnostics, subscription-management, support and other service providers that return information generated while providing services to us.
3. PURPOSES FOR WHICH WE PROCESS PERSONAL DATA
We process personal data for the purposes described below. The information used for a particular purpose depends on the feature, your settings and the providers involved.
1. To provide invoice, estimate and client-management functionality
We process Invoice Content and related technical information to create, display, organize, update and manage invoices, estimates, clients, items, payment instructions, notes, attachments and related records within the App.
Certain AI-powered features may use OpenAI as a specialized technology provider. When you choose to use such features, certain information or content may be sent to OpenAI to provide the functionality you request. Data sent to OpenAI is limited to what is reasonably necessary for the selected feature. To learn more, please visit OpenAI Privacy Policy.
2. To support invoice status, payment instructions and recordkeeping
We process dates, amounts, status information and other information you enter to help you organize and monitor invoices. Payment status is based on information you enter or update in the App and is not automatically verified against a bank or payment service. The App may display payment instructions you choose to include but does not itself process client payments.
3. To support user-directed sending, sharing and reminders
When you choose to send or share an invoice, estimate, reminder or related file, the App may prepare the relevant content and make it available to the communication or sharing service you select. Orvanta does not operate a backend message-delivery or open-tracking service for this functionality.
4. To provide subscriptions, in-app purchases and paid access
We process transaction, subscription, in-app purchase and entitlement information to unlock paid features, recognize trial or subscription status, restore purchases, diagnose purchase issues and synchronize entitlements. Apple processes App Store payments, and RevenueCat may help us manage subscription and purchase-entitlement status.
5. To provide customer support
We use contact details, support messages, technical context and relevant invoice or transaction information that you choose to provide to answer questions, troubleshoot issues, investigate purchase problems and respond to complaints. Zendesk may be used to organize and respond to support communications.
6. To analyze, maintain and improve the Service
We process device, usage, transaction, diagnostic and performance information to understand how Invoice App is used, measure reliability, identify errors, evaluate feature performance and improve usability. Firebase Analytics, Firebase Crashlytics and Amplitude may support these activities.
7. To advertise the App and measure paid acquisition
Invoice App does not display third-party advertising inside the App. We may advertise the App on external platforms and use attribution and measurement tools to understand which campaigns lead to installs, trials, purchases, subscriptions or other relevant events, evaluate campaign performance and improve paid user acquisition. Providers may include AppsFlyer, Meta, Google Ads / AdMob, Apple Search Ads, TikTok, Snapchat and AppLovin.
8. To protect the Service, prevent fraud and enforce our agreements
We may process device and network information, identifiers, purchase events, diagnostic information and security signals to detect misuse, prevent subscription or purchase fraud, protect infrastructure, investigate incidents, enforce our Terms of Use and establish or defend legal claims.
9. To comply with legal obligations
We may process, preserve or disclose information we control where necessary to comply with applicable laws, tax or accounting requirements, consumer-protection rules, data-protection obligations, court orders, subpoenas, lawful government requests, sanctions requirements or other binding legal process.
10. Corporate transactions and business administration
We may process or disclose information we control for audits, financing, insurance, due diligence, restructuring, merger, acquisition, sale of assets, insolvency or another corporate transaction, subject to appropriate confidentiality, security and legal safeguards.
How to opt out of or influence personalized advertising
You can control certain advertising and tracking activity through iOS settings. Depending on the iOS version and the feature, relevant controls may include Settings > Privacy & Security > Tracking and Settings > Privacy & Security > Apple Advertising > Personalized Ads. Disabling or limiting tracking may reduce personalized advertising or cross-app attribution, although it may not prevent all measurement activities that are permitted without consent.
You may also obtain information about interest-based advertising choices through the Network Advertising Initiative, the Digital Advertising Alliance and DAA AppChoices. If you reside in a U.S. state that provides a right to opt out of a “sale”, “sharing” or targeted advertising, see Section 12.4.
4. LEGAL BASES FOR PROCESSING PERSONAL DATA (EEA AND UK USERS)
If the GDPR or UK GDPR applies, we rely on one or more legal bases depending on the processing activity and circumstances. The same information may be processed under different legal bases for different purposes.
4.1. Performance of a contract
We process information where necessary to provide the Service you request, including creating and managing records within the App, supporting user-directed sharing, managing paid access, responding to service requests and administering subscriptions or purchases, and perform our obligations under the Terms of Use and Subscription Terms
4.2. Legitimate interests
We may process technical, usage, diagnostic, security and business-administration information where necessary for our legitimate interests in operating, securing, supporting, improving and understanding the Service; preventing fraud; protecting legal rights; and managing our business, provided those interests are not overridden by your rights and freedoms.
4.3. Consent
We rely on consent where required by law, including for certain tracking or advertising technologies, optional permissions, or processing of information that requires consent under applicable law. You may withdraw consent at any time, without affecting processing already carried out lawfully before withdrawal.
4.4. Legal obligations and legal claims
We process information where necessary to comply with legal obligations or to establish, exercise or defend legal claims, including consumer-protection, accounting, tax, sanctions, data-protection and lawful-request obligations that apply to us.
4.5. Sensitive or special-category information contained in Invoice Content
The Service does not require special-category information as a condition of ordinary use. If Invoice Content or support materials contain information that receives heightened protection under applicable law, we process that information only where a lawful condition applies, which may include explicit consent where required. We do not use such information to infer sensitive characteristics for unrelated advertising.
5. SHARING OF PERSONAL DATA
We do not disclose personal data indiscriminately. We share information only as reasonably necessary for the purposes described in this Privacy Policy, under contractual, technical or legal protections where appropriate.
5.1. Service providers and contractors
Hosting and infrastructure. We use Amazon Web Services (AWS) for cloud infrastructure supporting certain operational components of the Service. AWS may process technical information required for those functions. Core invoice, client and related content is not stored by us on AWS as part of the ordinary invoice-management functionality.
Analytics and diagnostics. We may use Firebase Analytics / Firebase Crashlytics and Amplitude to understand product use, measure performance, identify errors and maintain reliability. Depending on the integration, these providers may receive device or SDK identifiers, usage events, approximate location, crash logs and diagnostic information.
Subscriptions and App Store services. Apple processes App Store purchases. RevenueCat may help synchronize subscription status, in-app purchase status and paid-feature entitlements.
Customer support. Zendesk may process contact details, message content, attachments and support history needed to manage a request.
Technology providers. We use OpenAI to provide certain AI-powered features within the Service. When you choose to use these features, OpenAI may process information or content submitted through the relevant feature as necessary to provide the requested functionality.
Advertising and attribution. We may use AppsFlyer, Meta, Google Ads / AdMob, Apple Search Ads, TikTok, Snapchat and AppLovin to advertise the App, attribute installs or purchases and measure campaign performance. These providers may receive advertising or device identifiers, campaign parameters, attribution data and limited conversion events. The App does not display third-party advertisements.
5.2. Apple and App Store services
Apple provides the iOS platform and App Store purchase environment used by the Service. Apple processes information under its own Privacy Policy and applicable platform terms.
5.3. User-directed sharing and communication services
When you choose to send or share an invoice, estimate, reminder or related file, the App may make the relevant content available to the communication or sharing service you select. The provider of that service may process the information under its own terms and privacy practices. Orvanta does not operate a backend message-delivery or open-tracking service for this functionality.
5.4. Courts, regulators, law enforcement and other authorities
We may disclose information we possess where required by law, binding legal process, court order, valid regulatory request or another lawful obligation, or where reasonably necessary to protect rights, security and safety.
5.5. Business transfers and professional advisers
We may disclose information we control to professional advisers, auditors, insurers, lenders, investors or transaction counterparties where reasonably necessary for legal, financial, security, due-diligence or corporate-transaction purposes, subject to appropriate confidentiality and legal safeguards.
5.6. At your direction
We may disclose or make information available where you specifically request, direct or authorize us to do so.
6. YOUR PRIVACY RIGHTS
Depending on your location and applicable law, you may have rights to access personal data we control, obtain a copy, correct inaccurate data, request deletion, restrict or object to certain processing, withdraw consent, request portability, opt out of certain advertising-related processing, or complain to a supervisory authority. These rights are subject to legal conditions, limitations and exemptions.
6.1. App and device controls
You can manage invoice, client and related records through the controls made available in the App. You can also manage App Tracking Transparency and other device-level permissions or privacy settings through iOS. These controls are separate from requests concerning information held by Orvanta or our service providers.
6.2. How to submit a privacy request
To exercise a privacy right concerning information that Orvanta or its service providers control and that cannot be completed through available App or device controls, contact us at support@orvanta.limited. Describe the request and provide information reasonably necessary to identify the relevant purchase, installation or support record. We may ask for information needed to verify your identity and protect against fraudulent requests.
6.3. Authorized agents
Where applicable law allows an authorized agent to submit a request on your behalf, we may require proof that the agent is authorized to act for you and may also verify your identity or ask you to confirm the request directly, to the extent permitted by law.
6.4. Automated decision-making
The Service does not use personal data to make solely automated decisions that produce legal or similarly significant effects on you.
7. AGE LIMITATION
The Service is intended for users aged 16 and older. If you are under 16, you may use the Service only where your parent or legal guardian has reviewed and agreed to this Privacy Policy for you and such use is lawful in your jurisdiction. We do not knowingly process personal data from a person under 16 in circumstances where valid parental authorization or another lawful basis is required but has not been obtained. If you believe a younger person has provided personal data improperly, contact us at support@orvanta.limited.
8. INTERNATIONAL DATA TRANSFERS
Orvanta is established in Cyprus, while our users, providers and technical infrastructure may be located in other countries. Certain operational infrastructure used for Invoice App, including AWS us-east-1, is located in the United States. Analytics, attribution, support, subscription and advertising providers may also process information in the United States, the EEA, the UK or additional countries depending on their infrastructure and the service used.
Where personal data originating in the EEA is transferred to a country that does not benefit from an applicable adequacy decision, we use appropriate safeguards where required, which may include the European Commission Standard Contractual Clauses and supplementary measures. Information about EU adequacy decisions is available from the European Commission.
For restricted transfers from the UK, we may use the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, adequacy regulations or another lawful transfer mechanism, as described in the UK ICO international transfers guidance.
9. HOW WE PROTECT YOUR PERSONAL DATA
We use technical and organizational measures designed to protect personal data against unauthorized access, alteration, loss, destruction or disclosure. Depending on the system, measures may include access controls, authentication, encrypted network transmission, provider security controls, logging, monitoring, restricted production access, software updates, incident-response procedures and data-minimization practices.
No method of device processing, transmission or cloud processing is completely secure. We therefore cannot guarantee absolute security. You are responsible for protecting your iPhone and for exercising care when maintaining, sending or sharing invoices or other records that contain confidential or sensitive information.
10. DATA RETENTION
We retain personal data that we control only for as long as reasonably necessary to provide the Service, fulfil the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes and enforce agreements. Retention periods vary depending on the type of information, the purpose for which it is processed and the applicable legal or operational requirements.
Core invoice, client and related content maintained within the App is not retained by Orvanta in a backend content store as part of the ordinary invoice-management functionality. Subscription and transaction information may be retained as necessary to administer entitlements, handle refund or dispute issues, comply with accounting or legal requirements and maintain fraud-prevention records. Support communications may be retained for the time reasonably necessary to resolve the request and maintain appropriate business records. Analytics, attribution and diagnostic providers may retain information according to the settings and contractual arrangements applicable to our use of their services.
Backups and logs maintained for systems that Orvanta or its providers control may retain limited information for a reasonable period before being overwritten or isolated from ordinary use. Information that must be retained for legal, security or dispute-resolution reasons is restricted to those purposes and deleted or otherwise disposed of when the reason for retention ends, subject to applicable law.
11. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy to reflect changes in Invoice App, providers, technical architecture, legal requirements or our data practices. We will update the “Last Updated” date and provide additional notice where applicable law requires it. If a change materially affects processing that relies on consent, we will obtain renewed consent where required.
12. U.S. STATES PRIVACY NOTICE
Applicability and scope
This section supplements the rest of this Privacy Policy for residents of U.S. states with comprehensive privacy laws, including California and other states where applicable. The rights available to you depend on the state in which you live and the law that applies.
12.1. Categories of Personal Information and Purposes of Processing
During the preceding 12 months, and depending on the features used, the Service may have processed the following categories of personal information:
- Identifiers, such as installation or SDK identifiers, IP address, device identifiers, advertising identifiers and support contact information.
- Commercial information, such as subscription or in-app purchase product, purchase, restore, trial, renewal, refund, cancellation or conversion events.
- Internet or other electronic network activity, such as app screens or features used, interactions, session information, referral and attribution events, invoice-management events, ad interactions, crash information and diagnostics.
- General geolocation information, such as country, region or city inferred from IP address. We do not collect precise GPS location for the ordinary processing described in this Policy.
- Business, client, invoice, estimate and related content that you choose to maintain or process through the App.
- Sensitive personal information, only to the extent tax, identification, payment or other information you choose to maintain or provide is treated as sensitive under applicable law.
We use these categories for the purposes described in Section 3, including providing invoice and estimate functionality; managing subscriptions and in-app purchases; support; analytics and improvement; advertising measurement; security; legal compliance; and business administration.
12.2. Disclosure for business purposes
During the preceding 12 months, we may have disclosed identifiers, commercial information, network activity and other information controlled by Orvanta to the service-provider and recipient categories described in Section 5 for business purposes. Content processed through the App is not used by us to build advertising profiles or for unrelated advertising purposes.
We may also disclose information to public authorities, professional advisers or transaction counterparties as described in Section 5.
12.3. State privacy rights
Depending on your state, you may have some or all of the following rights: to know or confirm whether we process personal information; access personal information; request deletion; correct inaccuracies; obtain eligible data in a portable format; opt out of sale, sharing, targeted advertising or certain profiling; limit certain uses or disclosures of sensitive personal information; withdraw consent where applicable; appeal certain decisions; and exercise rights without unlawful discrimination.
How to Submit a Privacy Request
To exercise an applicable privacy right, email support@orvanta.limited and describe the request, together with your state of residence where relevant. We may request information reasonably necessary to verify your identity and match the request to purchase, device, installation or support records. Where permitted by law, an authorized agent may act on your behalf subject to appropriate verification.
If we deny a request and the law applicable in your state gives you a right to appeal, you may request review by replying to our decision or emailing support@orvanta.limited with the subject line “Privacy Request Appeal.”
12.4. Sale, sharing and targeted advertising
We do not sell personal information for money. We may allow advertising, attribution and measurement partners to collect or receive advertising identifiers, device identifiers, IP address, approximate location, app interaction information, attribution events and limited commercial or purchase-conversion events. Under some state laws, these activities may be considered a “sale”, “sharing” or processing for targeted advertising even though no monetary payment is made for the data.
Relevant recipients may include advertising networks, social-media platforms, analytics and measurement providers, and attribution services such as Meta, Google, TikTok, Snapchat, AppLovin and AppsFlyer. The exact recipients depend on the campaigns and SDK configuration in use. The App does not display third-party advertising.
Content processed through the App is not used by us to build advertising profiles or for unrelated advertising purposes.
Where applicable, you may opt out of sale, sharing or targeted advertising by emailing support@orvanta.limited with the subject “Opt Out of Sale, Sharing, or Targeted Advertising.” You may also use iOS privacy and App Tracking Transparency controls. Some advertising choices are device- or provider-specific and may need to be repeated after device or identifier changes.
We do not knowingly sell or share the personal information of individuals under 18 for targeted advertising where applicable law requires opt-in consent or otherwise prohibits that processing.
12.5. Do Not Track and other privacy preference signals
Browser “Do Not Track” signals generally do not control processing inside an iOS application. This is separate from device privacy controls, App Tracking Transparency and legally recognized opt-out preference mechanisms.
Where a legally recognized opt-out preference signal or universal opt-out mechanism can be applied to a relevant interaction or supported technology, we will process the signal as required by applicable law. You may also use iOS privacy settings or contact us directly to exercise an applicable opt-out right.
12.6. California-specific information
California residents may have rights under the California Consumer Privacy Act, as amended, including rights to know, access, correct and delete personal information and to opt out of sale or sharing, subject to legal exceptions. We do not use or disclose sensitive personal information for purposes that would require a separate “Limit the Use of My Sensitive Personal Information” mechanism based on the processing described in this Policy.
California’s “Shine the Light” law (Cal. Civ. Code § 1798.83) permits eligible California residents to request information once a year about certain disclosures of personal information to third parties for those third parties’ direct-marketing purposes. To make such a request, email support@orvanta.limited with “Request for California Privacy Information” in the subject line and include your state of residence and email address.
12.7. Nevada residents
Nevada residents may submit a verified request to opt out of a covered sale of certain personal information under Nevada law by contacting support@orvanta.limited. We do not sell personal information for monetary compensation as described in this Policy.
12.8. Financial incentives and consumer health information
We do not currently offer a financial incentive or price or service difference in exchange for personal information. Invoice App is not a health service and is not designed to collect consumer health data as a separate product category. Content you choose to maintain or process through the App may nevertheless contain health or other sensitive information. Such information is processed to provide the feature or support you request and is not used to build a consumer health profile for unrelated purposes.
13. CONTACT US
For questions about this Privacy Policy, previous versions or the processing of personal data, contact Orvanta Digital Limited at support@orvanta.limited. Registered office: Zinonos Kitieos, 15, Ypsonas, 4187, Limassol, Cyprus. Registration number: HE 496479.
Effective as of: September 1, 2026