This policy explains how Hero Blue Pty Ltd ("we", "us", "our"), the operator of the Invoice Anything app and website, collects, uses, discloses and protects your personal information. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Invoice Anything is used by two kinds of people, and we collect different information about each:
- a business — the person or company that prices work, sends quotes and invoices, and gets paid; and
- a customer — the person a business sends a quote or invoice to. Customers never install the app; they open a link.
1. Information we collect
If you are a business (app account holder)
- Account details — your name or business name, email address, and a password (stored only as a secure one-way hash).
- Business profile and settings — a description of how your business works, and the numbers your pricing depends on, such as your hourly rate, call-out fee and GST registration status.
- Price book — the items and services you sell and what you charge for them.
- Quotes and invoices — the line items, quantities and amounts you create, together with the contact details of the customers you send them to (a mobile number and/or email address that you enter or import).
- Settlement information — to receive money you are set up as a sub-merchant with our payment provider, Pinch. Pinch collects the identity, banking and compliance information it needs for that directly from you; we do not store your bank account or card numbers.
If you are a customer (quote/invoice recipient)
- Contact detail — the mobile number or email address the business used to send you a link. We use it to deliver the quote or invoice and to send confirmations.
- Rewards identity — so we can recognise you across invoices and award pay-by-bank rewards, we store your contact detail only as a one-way cryptographic hash, never as your raw number or email. Your points earned and spent are recorded in an append-only ledger tied to that hash.
- Payment details — when you pay, your card or bank details are entered directly with Pinch. They never pass through, and are never stored on, our systems.
Everyone
- Technical and usage data — standard server logs such as IP address, device and operating-system type, and timestamps, which we use to run and secure the service. We do not use third-party advertising, analytics or tracking SDKs.
2. How we use your information
- To provide the service — creating, pricing, sending and tracking quotes and invoices.
- To turn your spoken or typed job description into priced line items using AI (see Section 3).
- To process payments through Pinch and to confirm when an invoice is paid.
- To calculate, award and redeem pay-by-bank rewards.
- To keep your accounting in sync if you connect Xero (see Section 3).
- To secure the service, prevent fraud and abuse, and meet our legal, tax and record-keeping obligations.
3. Who we share it with
We do not sell your personal information, and we do not share it for advertising. We use a small number of trusted service providers to run Invoice Anything:
- Pinch Payments — processes all payments and holds card and bank details securely on its own systems.
- Anthropic (the maker of Claude) — to generate pricing suggestions, the content of your request and relevant parts of your business profile are sent to Anthropic's AI service, which processes them and returns priced line items to us.
- Microsoft Azure — hosts our application and data (see Section 4).
- Xero — only if you choose to connect your Xero account, we share the invoices and payment records needed to keep your books in sync. You can disconnect Xero at any time.
We may also disclose personal information where required by law, or to protect our rights, users or the public.
4. Where your information is stored
Your information is stored on Microsoft Azure infrastructure located in Australia. Some of our service providers (for example Anthropic) may process information overseas; where that occurs, we take reasonable steps to ensure it is handled consistently with the APPs.
5. How long we keep it
We keep your information for as long as your account is active and for as long afterwards as we need it to meet legal, tax and accounting obligations, resolve disputes and enforce our agreements. The rewards ledger is append-only: corrections are made by adding a further entry rather than by editing or deleting past ones.
6. How we protect it
- All traffic between the app and our servers is encrypted in transit (HTTPS/TLS).
- Passwords are stored only as secure one-way hashes.
- Payment details are handled and tokenised by Pinch and never stored by us.
- On your device, sign-in tokens are held in the operating system's secure storage.
7. Your rights
Under the Australian Privacy Principles you may request access to the personal information we hold about you, ask us to correct it if it is inaccurate, or ask us to delete it where we are not required to keep it. To make a request, email us at support@heroblue.com.au.
If you are not satisfied with how we have handled your information, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
8. Children
Invoice Anything is a business tool intended for use by adults. It is not directed at children, and we do not knowingly collect personal information from anyone under 18.
9. Changes to this policy
We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of this page, and significant changes will be notified in the app or by email where appropriate.
10. Contact us
Hero Blue Pty Ltd
Email: support@heroblue.com.au