Privacy Policy
Last updated: March 29, 2026
1. Introduction
InvoiceXchange ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our B2B invoice management and financing platform (the "Service"). Please read this privacy policy carefully. By using our Service, you consent to the practices described in this policy.
2. Information We Collect
2.1 Personal Information
We collect information you provide directly to us, including:
- Name, email address, and phone number
- Company name, address, and tax identification numbers
- Job title and department
- Account credentials and authentication data
- Payment and banking information
- Business registration documents and KYC verification data
2.2 Transaction Information
We collect information related to your use of the Service:
- Invoice details including amounts, dates, and descriptions
- Payment history and transaction records
- Buyer-supplier relationship data
- Marketplace listing and financing information
- Dispute and resolution records
2.3 Automatically Collected Information
When you access our Service, we automatically collect:
- Device information (browser type, operating system, device identifiers)
- Log data (IP address, access times, pages viewed)
- Usage patterns and feature interactions
- Cookies and similar tracking technologies
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Service
- Process invoices, payments, and financing transactions
- Verify identity and conduct KYC/AML compliance checks
- Facilitate marketplace operations and early payment programs
- Send transactional communications and notifications
- Provide customer support and respond to inquiries
- Analyze usage patterns to enhance user experience
- Detect, prevent, and address fraud and security issues
- Comply with legal obligations and regulatory requirements
- Enforce our terms of service and protect our rights
4. Information Sharing and Disclosure
4.1 With Your Consent
We share information when you direct us to, including sharing invoice data with buyers, suppliers, or financing partners as part of normal platform operations.
4.2 Business Partners
We may share information with counterparties in your transactions (buyers and suppliers), payment processors, banks, and financing institutions to facilitate transactions and services.
4.3 Service Providers
We engage third-party service providers to perform functions on our behalf, including cloud hosting, data analytics, customer support, and security services. These providers are contractually obligated to protect your information.
4.4 Legal Requirements
We may disclose information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, property, or safety, or that of others.
4.5 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change in ownership.
5. Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit and at rest using industry-standard protocols
- Multi-factor authentication and secure access controls
- Regular security assessments and penetration testing
- Employee training on data protection practices
- Incident response procedures and breach notification protocols
- SOC 2 Type II compliance and regular audits
While we strive to protect your information, no method of transmission or storage is completely secure. We cannot guarantee absolute security but will notify you of any breach as required by applicable law.
6. Data Retention
We retain your information for as long as necessary to:
- Provide our services and maintain your account
- Comply with legal, accounting, and regulatory requirements
- Resolve disputes and enforce our agreements
- Support business operations and analytics
Financial records and transaction data are retained for a minimum of seven (7) years as required by financial regulations. After account closure, we may retain certain information in anonymized or aggregated form for analytical purposes.
7. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information, subject to legal retention requirements
- Portability: Request transfer of your data in a machine-readable format
- Objection: Object to processing of your information for certain purposes
- Restriction: Request restriction of processing in certain circumstances
- Withdrawal of Consent: Withdraw consent where processing is based on consent
To exercise these rights, please contact us at privacy@invoicexchange.com. We will respond to requests within 30 days or as required by applicable law.
8. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Maintain your session and authentication status
- Remember your preferences and settings
- Analyze usage patterns and improve our Service
- Provide security features and detect anomalies
You can control cookie settings through your browser. Disabling certain cookies may limit your ability to use some features of our Service.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including:
- Standard contractual clauses approved by relevant authorities
- Adequacy decisions for transfers to approved jurisdictions
- Binding corporate rules where applicable
- Your explicit consent for specific transfers
10. Children's Privacy
Our Service is intended for business use and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.
11. Third-Party Links and Services
Our Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access through our platform.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may provide additional notice via email or in-app notification. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
InvoiceXchange Privacy Team
Email: privacy@invoicexchange.com
Address: 123 Finance Street, Suite 400, New York, NY 10001
Data Protection Officer: dpo@invoicexchange.com