Legal
Privacy Policy
Effective May 23, 2026
CortexLumora Private Limited ("we", "us", or "our") operates the Quill Invoice mobile application and the website at quillinvoice.cortexlumora.com (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.
By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Information we collect
We collect information that you provide directly to us, that is generated when you use the Service, and that we receive from third-party services you connect to Quill Invoice.
a. Account information
When you sign in, we collect your email address. We use Clerk and AWS Cognito to manage authentication. We do not store your password.
b. Business and invoice data
We store data you create in the app: business profile, logo, client details, line items, invoices, estimates, and any notes or attachments you add. This data is yours and is stored so you can access it across your devices.
c. Device permissions
With your permission, the app may access your photo library (to set a business logo), camera (to capture a logo), and contacts (to quickly add clients). These permissions are optional and you can deny or revoke them at any time in your device settings. Contact data you pick is only sent to our servers if you explicitly save a client.
d. Usage data
We collect basic, non-identifying usage information — such as crashes, app version, device model, and operating system — to improve the Service. We do not track your behaviour across other apps or websites.
2. How we use your information
- To provide, operate, and improve the Service.
- To sync your invoices, estimates, and clients across your devices.
- To process subscription payments via Apple or Google.
- To send transactional emails (sign-in codes, receipts, important service updates).
- To respond to your support requests and feedback.
- To detect, prevent, and address fraud or abuse.
We do not sell your personal information. We do not use your invoice, client, or business data to train AI models.
3. Subscriptions and payments
Subscription purchases are processed by Apple (App Store) or Google (Play Store). We never see or store your payment card details. Apple and Google share limited information with us (purchase status, renewal date, and an anonymous transaction identifier) so we can unlock features for the right account.
4. How we share information
We share data only with service providers who help us run the Service, under strict confidentiality. These include:
- Authentication: Clerk, AWS Cognito.
- Hosting and storage: Amazon Web Services (AWS), including S3 for file storage.
- Subscription management: RevenueCat, Apple, Google.
- Analytics and crash reporting: Expo / Sentry (or equivalent), limited to non-identifying data.
We may also disclose information if required by law, to comply with a valid legal process, or to protect the rights, property, or safety of our users or others.
5. Data retention and deletion
We keep your data while your account is active. You can delete your account from Account → Delete account in the app. Deletion is permanent: invoices, estimates, clients, and uploaded files associated with your account are removed within 30 days, except where retention is required by law (e.g. tax records of paid subscriptions).
6. Security
We use industry-standard encryption in transit (TLS) and at rest. However, no method of transmission or storage is 100% secure. Please report any suspected vulnerability to security@quillinvoice.app.
7. International users
Quill Invoice is operated from India. If you access the Service from elsewhere, you understand that your data will be transferred to and processed in countries where our service providers operate, including the United States and India.
8. Children
Quill Invoice is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.
9. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data; object to or restrict certain processing; and withdraw consent. To exercise these rights, email privacy@quillinvoice.app. We will respond within 30 days.
10. Changes to this policy
We may update this policy from time to time. When we do, we will update the "Effective" date above and, for material changes, notify you in the app or by email.
11. Contact us
Questions? Reach us at hello@quillinvoice.app.
CortexLumora Private Limited
Kerala, India