Privacy Policy

Crest Invoice is a personal software project operated by the Crest Invoice Team: Alina Riaby and Pavel Riaby.

Your invoice choices

• When you save or print a PDF, your invoice stays in your browser and your chosen file or printer.
• A temporary link stores your invoice until 30 days after its due date, or 30 days after creation if it is overdue or undated.
• When you choose Send and track, Crest sets a deletion date one year ahead at creation and shows it before you verify your email. Nothing you do later moves it.
• Crest keeps your business name and owner email separately from invoices. Account deletion is not available yet. Payment defaults exist only after you save them.

Crest shows what will be sent before you submit.

Who operates Crest

Alina Riaby and Pavel Riaby are joint controllers. They jointly decide why and how Crest processes data and share responsibility for its protection and your requests. Crest Invoice Team is their working name, not an incorporated entity. You may exercise your rights against either of them. Email support@crest-invoice.com.

Crest does not sell or rent personal data, disclose it for advertising, or use it for targeted advertising.

What Crest processes, and why

The invoice creator usually supplies client data and must have authority to do so.

Who receives data

• Crest's application and database are hosted by Hetzner in Nuremberg, Germany.
• Crest uses Mailjet in the European Union to send transactional email, with Amazon SES in the United States as its backup transactional provider. Cloudflare delivers and protects Crest's website and routes inbound email. It processes each website request, including your IP address, to deliver pages, block attacks and apply rate limits. Support mail is stored by HEY's provider, 37signals, in the United States. Crest has not verified every provider's account-specific storage locations or retention periods.
• Analytics requests go to analytics.gnomik.org through Cloudflare. Crest owns the Umami installation used for its analytics. The analytics service runs on a shared Gnomik server hosted by Hetzner in Nuremberg, Germany. Umami visit data is currently kept until Crest deletes it. Crest has not verified whether any separate purge job applies. Stored records include page addresses and query strings, page titles, referrers, timestamps and generated session identifiers. They also include browser, operating-system, device, screen-size, language, country and campaign information. Umami uses IP addresses and browser information to generate session identifiers. Its analytics database does not store raw IP addresses in session and event records.
• Crest uses Stripe, Inc. in the United States to process Founding Lifetime purchases and refunds as its payment processor. Stripe receives your email and payment details directly; Crest stores only the purchase identifiers, amount and status Stripe reports back.
• Fillout (Restly, Inc.) in the United States hosts the optional questionnaire. It loads only when you tap the questionnaire button. Fillout receives your answers and, when analytics is allowed, your first-touch gclid, gbraid, wbraid, utm_source, utm_campaign, utm_content and Crest session identifier (crest_session).

Creators and recipients receive invoice information and status appropriate to their role. Advisers, authorities or courts receive data only where necessary and lawful for advice, a duty or a claim.

Crest uses hosting in Germany, Mailjet in the European Union for transactional email, Amazon SES in the United States as backup, Cloudflare for website delivery, protection and inbound email routing, and HEY in the United States for support mail. Crest has not verified all contractual safeguards for international transfers involving these services. Ask support for verified provider countries, roles and transfer safeguards for your request. Crest does not infer these from public terms.

How long Crest keeps data

• Crest deletes temporary Live Invoices 30 days after the end of a future due date, or 30 days after link creation if overdue or undated. The same deadline governs access and deletion. A scrambled record of the link address that cannot be turned back into the invoice remains a further 30 days to keep links invalid.
• Crest deletes demo invoices within 24 hours and their scrambled link records within 7 days.
• When you send and track an invoice, Crest sets a deletion date one year ahead at creation and shows it before you verify your email. Verifying does not change it. Viewing, sending, reminders, payment reports and closing never move it. Crest deletes the invoice and its related records on that date unless you delete them sooner. For older invoices that have no stored date, the year counts from the first recorded upgrade, or from creation.
• Deletion immediately hides invoices and disables links. You can undo within 15 seconds, measured by Crest's server clock, and the invoice, links, reminders and activity come back exactly as they were. Background cleanup then permanently removes content, payment information, events, reminders and access records. A scrambled link record remains 30 days to prevent reuse.
• Crest deletes detailed delivery logs within 30 days of their last update or when it permanently deletes the related invoice, whichever comes first. Delivery logs contain a masked recipient address, a generic subject, delivery status, error information and timestamps. Crest does not store the full sent-message body in those logs. An accepted-delivery marker prevents repeat delivery and stays until invoice deletion.
• Sign-in codes expire after 30 minutes. Crest deletes expired records within 24 hours of expiry and sessions when they expire. Your account access cookie lasts up to 400 days and is renewed while your browser keeps using Crest; it is removed when you sign out. A one-invoice access cookie granted to a sender or client lasts up to 30 days.
• Crest keeps your business name and owner email separately from invoices. Account deletion is not available yet. Deleting invoices does not remove them. Crest stores payment defaults for verified owners only after you explicitly save them. Saved payment defaults remain after invoice deletion until you replace them. Anonymous browser keys never store payment defaults.
• Crest deletes completion events after 30 days. Crest deletes an invoice's linked contact when it permanently deletes the invoice. Other completion contacts are deleted once they are more than 30 days old and no completion event or Live Invoice references them.
• Crest deletes waitlist entries after 180 days, or earlier if you withdraw. Crest deletes usage events stored in its application database after 90 days. The separate Umami configuration has no automatic expiry.
• Ordinary web-server and application request logging is switched off; no routine access logs are kept.
• Crest does not store or log the bank identifier that the landing's payment details demo looks up to name a bank. The web server leaves that request out of its access log, and the application writes no record of the identifier.
• Crest keeps support mail while your request remains open. Crest deletes support mail no later than 24 months after the request is closed.
• Hetzner creates daily server backups in Nuremberg, Germany. Hetzner keeps up to seven server backups, replacing the oldest when all seven slots are full. Crest also keeps two SQLite recovery copies on its application server in Nuremberg, Germany. These recovery copies are not automatically expired. The SQLite recovery files are not encrypted. Crest has not verified provider-side backup encryption.
• Crest keeps Founding Lifetime purchase records (email, Stripe identifiers, amount and status) while the entitlement is active, and afterwards only as long as tax, accounting or dispute-defence duties require.
• Crest deletes rights-request, incident or legal records when that specific need ends. It never reuses them for measurement or marketing.

Delete invoices in Crest or email support. The 15-second Undo window covers Crest's primary database. Provider delivery logs, delivered emails and backups are outside immediate deletion. Crest has not verified retention periods for Mailjet and Amazon SES mail queues and logs, Cloudflare routing, request and security records, or HEY mailbox backups. Historical data retained by former mail providers may also remain outside immediate deletion. Rights responses report verified outcomes and timing for your request.

Your rights

Where applicable law allows, you can ask to see, correct or delete your personal data, or receive a copy in a portable format; restrict processing; object to legitimate-interest processing, including direct marketing; or withdraw consent. Withdrawal leaves earlier lawful processing valid. Crest makes no solely automated decisions using invoice data with legal or similarly significant effects.

Email support with the relevant feature or invoice, avoiding unnecessary sensitive data. Crest requests only reasonable identity checks and responds within the governing law's deadline. Normal requests are free. Only manifestly unfounded or excessive requests may receive a lawful, explained fee or refusal.

You can complain to the relevant authority, including Serbia's Commissioner for Information of Public Importance and Personal Data Protection, without limiting other remedies.

Security, children and changes

Crest uses encrypted connections, secure HTTP-only cookies, hard-to-guess access links, limited data collection and access controls. Share links only with intended recipients, like passwords. No internet service is completely secure.

Report incidents to support. Crest assesses and contains them, keeps necessary evidence and notifies people and authorities as legally required.

You must be 18 or older, with legal capacity and authority to issue invoices or act for the sender. Crest is not for children. Contact support about children's data submitted without authority so Crest can assess and delete it.

Material changes are announced in Crest or by email. Prior versions remain available. Where consent is required, continued use cannot replace it.

Cookies, storage and analytics

A new example invoice picks its currency from your browser language: US dollars for a US locale, pounds for a UK locale, and pounds with a generic example otherwise. Existing work takes priority; you can change currency. This does not locate you, look up your IP or store a country preference.

Local and session storage are not cookies, but rules about storing data on your device can still apply to them. Analytics sets no cookies, receives no persistent Crest identifier and honours Do Not Track. Current analytics requests exclude query/hash values, invoice content and Crest session ids. It serves no advertising, fingerprinting or cross-site tracking.

The Analytics privacy control stores only your site's opt-out preference; opting back in removes it. Crest uses no generic cookie banner in this minimized configuration. This is Crest's own configuration choice, not something a court or regulator has approved.