Privacy Policy

Controller. Hylen Invoice is operated by Hylen Technologies LLC, a limited liability company registered in the State of Wyoming, United States of America, with its registered office at 30 N Gould Street, Suite R, Sheridan, Wyoming 82801, United States ("we", "us", "our").

Scope. This Privacy Policy explains how we collect, use, share, and protect personal data when you visit hyleninvoice.com, view our terms, create an account, or use Hylen Invoice, and what we keep about payments made before Hylen became free.

Related terms. This policy forms part of the Hylen Invoice Terms of Service. Words defined there have the same meaning here.

Contact. For any privacy question or request, email [email protected].

Account data. Your email address, and how you sign in: the address you sign in with, when you last did, and, if you use Google, the account identifier Google gives us and when you first used it. We do not set or store a password: you sign in by clicking a link we email you, or with Google. The first time you sign in we ask for your country and the type of business you run (from a list, or a few words of your own if you choose Other), and we record when you told us. You set both yourself and can change them at any time on your account page. We ask for them to understand who uses Hylen: we count accounts by country and by type of business, and we do not use them for anything else. We also keep the country written on the documents you make, and, if you paid before Hylen became free, an identifier for your record with our payment provider and whether you agreed then to occasional email about the product. Your name, business name, phone number, address and tax number are not account data here. They exist only inside the documents you create, which clause 2.4 covers.

Billing data, for past payments only. Hylen stopped selling anything on 14 October 2026. For payments made before then we keep your plan, your payment history and the transaction references. Payment was by card. Card details were collected and processed by Stripe and never reached our server, and we do not hold your card number or any part of it. Where tax was charged, Stripe also collected your billing address, and a VAT or business tax number if you entered one, and holds those against your payment record.

Acceptance of our terms, for past payments. Where our payment provider asked you to tick a box accepting our terms before a payment, that acceptance is recorded against the payment, with the time it was given. We rely on it as evidence if one of those charges is disputed.

User Content. Information you enter into documents, such as your logo, a signature or stamp image, your own business details, your customers’ names and contact details, items, prices, quantities, and tax details.

Usage and technical data. Server log data, your IP address, browser and device information, which pages and features you used, a record of each document handed out, and error reports. Your IP address is also counted against short-lived rate limits that keep the service usable and stop abuse.

Communications. Messages you send to [email protected], including refund requests and correspondence about a disputed charge.

Usage statistics, only if you accept them. If you press Accept on the cookie notice, your browser loads Umami, a statistics tool we run ourselves on our own server under hyleninvoice.com. It records the address and title of each page you open, without anything after a ? or # in the address, the page you came from, your browser, operating system, device type, screen size and language, and your country, and where it can tell your region and city, worked out from your IP address. The IP address itself is not stored. Pages whose address can carry a code or a one-time link, namely the retrieval page, the sign-in confirmation page and the links that open a draft in the editor, are never recorded. To count visits without a cookie, Umami turns your IP address and browser details into a one-way code that changes every month. If you press Reject, or never answer, it does not load at all. Clause 10.2 says how to change your answer.

Connected apps. If you connect an app to your account, such as an AI assistant, we keep the name and web addresses the app gave us, the permissions you approved, when you approved them and when the app last used them, and which documents it created for you. The access and refresh tokens we issue to the app are stored only in a scrambled (hashed) form that cannot be turned back into the token. A connected app can never download a PDF, pay, sign you in, reveal or email a retrieval code, or change your email address. You can see and revoke every connected app from Connected apps on your account; revoking one stops it at once, and signing out does not revoke it.

To provide the Services, which means generating and storing your documents, letting you download them once you are signed in, giving one back when you present a retrieval code from a past purchase, listing the ones you downloaded while signed in on your account page so you can download them again and track whether your own customers have paid, and letting a plan bought before Hylen became free run to its end. Lawful basis: performance of our contract with you.

To keep the records of past payments and of the acceptance of our terms given with them, and to rely on those records as evidence in a refund dispute or a chargeback. Lawful basis: our legitimate interest in proving what was agreed, and compliance with legal obligations.

To keep the Platform secure and to detect and prevent fraud, abuse, and the use of this service to produce dishonest documents. Lawful basis: legitimate interests and legal obligations.

To send service messages, including your sign-in links, a new retrieval code for a document you bought before Hylen became free if you ask for one, notice that a plan you bought then will not renew, and notice of changes to our terms. Lawful basis: performance of contract and legal obligations.

To understand who uses Hylen and improve it, using aggregated counts: of accounts by the country and type of business you give us (clause 2.1), and of visits, from the usage statistics in clause 2.7 if you accept them. Lawful basis: legitimate interests for the counts of accounts, and consent for the usage statistics.

No marketing. We use your email address only to run the service and for the counts in clause 3.5, and we send no marketing messages. Before 14 October 2026 a box at the payment step asked whether you would like occasional email about the product. We never sent any, we no longer ask, and we will not act on those answers. If you would like your answer removed, write to [email protected].

To meet legal requirements, including tax and accounting obligations and responding to lawful requests from authorities. Lawful basis: legal obligations.

Your role. When you enter personal data about your own customers or suppliers into a document, you are the controller of that data and we process it as your processor, only to provide the Services to you.

Your responsibilities. You are responsible for having a lawful basis to use that data and for giving your customers any notice they are entitled to.

No other use. We do not sell your customers’ data, use it for our own marketing, or read documents to build a profile of anyone.

We do not sell personal data. We share it only as follows:

1. (a)Stripe, which took our payments before 14 October 2026 and still holds the records of them, to handle refunds and disputes about those payments and to let a plan bought then run to its end. We send Stripe nothing about new use of Hylen.
2. (b)Service providers who host, secure, and support the Platform, under contracts that require them to protect the data. These are Hostinger, which supplies and operates the server the site and its database run on, Cloudflare, which sits in front of the site so that every request you make reaches us through them, and the mail service that delivers our email. Because the secure connection from your browser ends at Cloudflare and is remade to us, they are able to see each request.
3. (c)Banks and card issuers, to whom we submit the record of your acceptance of our terms, and our billing records, as evidence in a chargeback or dispute about a past payment.
4. (d)Authorities, where required by law or where we reasonably believe disclosure is needed to prevent fraud, a tax offence, or harm.
5. (e)Google, but only if you choose to sign in with Google. Google then tells us your email address and an identifier for your account, and Google learns that you signed in here. If you use a mailed link instead, Google is not involved at all.
6. (f)Professional advisers and auditors, under duties of confidentiality.
7. (g)A buyer or successor, if all or part of our business is sold, merged, or restructured.
8. (h)WhatsApp, but only if you choose to message our support number. Every page carries a WhatsApp button in the corner. It is an ordinary link: nothing is loaded from WhatsApp or Meta while you read this site, and the number is not printed on the page. If you do message it, that conversation happens inside WhatsApp, which is operated by Meta and handled under its terms rather than this policy. Meta learns your phone number and whatever you write, and so do we. You never have to use it; the email address in clause 13 reaches the same people.
9. (i)An app you connect to your account, such as an AI assistant, but only if you connect one and only within the permissions you approve for it (see clause 2.8). What it receives, such as your drafts, your issued invoices or your email address and plan, is then handled under that app’s own terms rather than this policy. It can never download a PDF, pay, sign you in, reveal or email a retrieval code, or change your email address. You can revoke it at any time from Connected apps on your account, which stops it at once.

Where you ask us to, we send a document to the recipient you choose.

There is no advertising, no tag manager, no session recorder and no embedded widget, and no third party script runs on this site itself. The one measurement tool is the usage statistics in clause 2.7: Umami, which we run ourselves on our own server under hyleninvoice.com. Its script comes from our own address, what it records goes only to our server and is shared with no one, and it loads only if you press Accept. Even the typeface is served from our own domain rather than fetched from a font service while you read. The WhatsApp button in (h) is a plain link, which is what keeps that true.

We are based in the United States and our users are in many countries. Your personal data may be stored and processed in the United States and in other countries where we or our service providers operate.

When we transfer personal data across a border we use the safeguards applicable law requires, including contractual protections with our service providers, and we comply with the cross-border transfer rules that apply to you, including the EU and UK General Data Protection Regulation where they apply. If you want to know what safeguards cover a transfer of your data, write to us at the address in clause 13 and we will tell you.

Documents and their contents: one year from when the document was first saved, or, for a document bought before Hylen became free, one year from the purchase if that is later, which is how long its retrieval code works. After that the document is deleted, it leaves your account page, and any code for it stops working. Keep your own copy of anything that matters.

Records of past payments and of acceptance of our terms: for at least 7 years from the payment, to meet tax and accounting requirements and to defend legal claims. These are accounting records and we do not delete them on a schedule.

Sign-in links: a link expires 15 minutes after it is sent and works once. A spent or expired link, and the IP address recorded with it, is deleted after 30 days.

Sessions: a session lasts 30 days unless you sign out, and the record of it is deleted 90 days after it ends.

Email we have sent you: the queued message, including the retrieval code it carried, is deleted 30 days after it is sent or fails.

The record of each document handed out: one year, alongside the document itself. It is what lets us tell a genuine download from an abusive one.

Support and billing correspondence: for 3 years after the matter is closed.

Connected apps: a one-time authorization code and a link that opens a draft in the editor last minutes and are deleted a day after they expire. An app’s access and refresh tokens are deleted a day after they expire or are revoked. The record that you connected an app is deleted 30 days after you revoke it. An app registration that no connection refers to any more is deleted once it is 90 days old, or once it is a day old for an app identified by its own web address, unless we have blocked that app, in which case we keep the record of the block.

Usage statistics: 25 months. Older statistics are deleted automatically once a month. Your country and type of business are kept as long as your account is, and you can change them on your account page at any time.

We may keep data longer where the law requires it or where it is needed for an ongoing investigation or dispute. Aggregated data that no longer identifies anyone may be kept indefinitely.

We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and activity logging. A retrieval code is never stored: we keep only a one-way hash of it, so a stolen copy of our database cannot be used to open your documents. The same is true of the tokens that keep you signed in.

No system is completely secure. If a personal data breach is likely to put your rights at risk, we will notify you and the relevant authorities as the law requires.

Because there is no password, the thing to protect is your email inbox and the links we send to it: a sign-in link and a retrieval code both work for whoever holds them. Signing out ends a session immediately, and it stays ended even for someone holding a copy of the cookie. If you think someone else has read an email we sent you, sign out and write to us at [email protected] so we can look at what was accessed.

Depending on where you live, you may have the right to:

1. (a)access the personal data we hold about you;
2. (b)correct inaccurate or incomplete data;
3. (c)request deletion of your data;
4. (d)object to or restrict certain processing;
5. (e)receive your data in a portable format;
6. (f)withdraw consent at any time, where we rely on consent; and
7. (g)opt out of marketing messages.

How to make a request. Email [email protected] with the subject line "Privacy Request". We may ask you to verify your identity. We will respond within 30 days, or sooner where the law requires.

Limits. We may keep data we are required to retain by law, including the records of past payments and of acceptance of our terms, even after a deletion request. Exercising a privacy right does not create any right to a refund.

Complaints. You may complain to the data protection authority for the country you live in. We would rather you contacted us first so we can try to resolve it.

Essential cookies only. We set three, and all of them exist only to sign you in. One keeps you signed in. The other two live for a few minutes each during sign-in itself: one ties a mailed link to the browser that asked for it, so a link cannot be used from anywhere else, and one does the same for a Google sign-in. None is for measurement or advertising. All are set so that no script on this or any other page can read them, and so that they are only ever sent back to this site.

Usage statistics, only if you accept. A notice on every page asks whether you accept anonymous usage statistics, hosted by Hylen. Accept and Reject are the same size and equally easy. Only Accept loads them: they are the Umami statistics described in clause 2.7, served from our own server. Umami sets no cookies. Until you answer, and after Reject, it does not load. You can change your answer at any time from the Cookie settings link in the site footer, at the bottom of the home page and of this page. Choosing Reject after Accept stops any further recording; if your browser blocks this site from storing anything, it takes effect the next time you reload the page or open the site in a new tab. We run no advertising cookies and no third-party tracking of any kind.

On your own device. The document you are editing, your choice of light or dark appearance, and your answer to the cookie notice are kept in your browser so that a reload does not lose them. If you choose Reject after Accept, a marker named umami.disabled is kept there too, which tells the statistics script not to record anything. None of these is a cookie, and the document never leaves your device until you save or download it.

Hylen Invoice is for business users aged 18 or over. We do not knowingly collect personal data from anyone under 18. If we learn that we have, we will delete it.

We may update this Privacy Policy from time to time. Each update carries a new version number and a new "Last updated" date, both shown at the top of this page.

We will tell you about a material change by email before it takes effect, if we hold an address for you.

Hylen Technologies LLC, 30 N Gould Street, Suite R, Sheridan, Wyoming 82801, United States. Privacy, support and billing: [email protected].