Trust · Security
Your data, in plain words.
Your Inbill data is stored in a Postgres database run by Supabase in Tokyo, Japan. Each account can only read its own rows, enforced by the database. You can download everything as one JSON file at any time and delete your account yourself. Below is every company that processes your data for us, and why.
By Asad Mahmood, founder of Inbill.
Last updated
Storage
Where it lives and how it is kept apart
- Data is stored by Supabase in Tokyo, Japan, encrypted in transit and at rest.
- Row-level security in the database limits every account to its own clients, invoices and payments.
- Secret keys for email, AI and payments stay on the server. The web checkout uses only Paddle's public client token.
- Passwords are handled by Supabase Auth. Inbill never sees them in plain text.
Shared links
The pages you share on purpose
An invoice link (and a client page link) works for anyone who has it, so your client can open it without an account. Treat it like a shared document. If a link goes somewhere it should not, make a new one from the invoice and the old link stops working.
Sub-processors
Every company that processes your data
| Company | What for | When |
|---|---|---|
| Supabase | Database, sign-in, logo file storage and server functions. Hosted in Tokyo, Japan. | Always |
| Hostinger | Serves the website. Keeps standard request logs (IP address, time, page). | Always |
| Resend | Delivers emails: invoices and reminders you send to clients, and emails to you. | When an email is sent |
| Paddle | Merchant of record for Pro. Collects your payment details and handles tax and receipts. We receive your plan status and the email you paid with. | When you buy Pro |
| Google (Gemini API) | Drafts invoices and answers questions in the AI assistant. Your message goes through our server to Google. | When you use the AI assistant |
| ElevenLabs | Turns a short voice clip into text when your phone or browser cannot. | When you speak to the assistant on such a device |
| Sentry | Crash and error reports (stack trace, device or browser, page address). Session replay is off. | When something breaks |
| Google Sign-In | Shares your name and email with us if you choose "Sign in with Google". | Only if you choose it |
Google AdSense and AdMob are listed in the privacy policy because they would apply if ads were switched on. Ads are off. Inbill does not process card payments from your clients: they pay you through your own Wise, Payoneer, bank or card link.
Contact
Report a problem
Found a security issue, or want something deleted? Email asadtechlead@gmail.com. The founder reads every message and replies within 24 hours. The privacy policy has the full detail.
Questions people ask
Where is my Inbill data stored?
In Supabase (Postgres), hosted in Tokyo, Japan. Your browser keeps a few settings and unsaved drafts on your own device.
Can other users see my clients or invoices?
No. Database row-level security policies scope every query to your account, so the database refuses rows that are not yours. The only exception is what you share on purpose: anyone with an invoice link or client page link can open that one page.
Can I download all my data?
Yes. In your profile, "Download my data" saves one JSON file with your clients, products, services, invoices, payments, recurring schedules, "I've paid" reports, estimate answers, settings and logo file links. Settings also has a CSV export of invoices and payments.
How do I delete my account?
In your profile, choose "Delete account" and confirm. It is a hard delete of your data and your logo files, and backups are purged within 30 days. You can also email asadtechlead@gmail.com.
Is two-factor sign-in available?
Not for customer accounts yet. Use a strong, unique password or sign in with Google, which applies your Google account's own two-step verification.
What happens to what I tell the AI assistant?
Inbill sends your message through its server to Google's Gemini API and logs only the type and size of each request. Google processes it under its Gemini API terms; see the privacy policy. The assistant is optional, and every other feature works without it.
Try it on your next invoice.
Free for 10 invoices a month. Pro is $5 a month. No card needed to start.
Start free