Privacy notice

Phase 2 data processing documentation · draft for legal review.

1. Guest mode vs. Cloud accounts

In guest mode, all invoice editing, calculations and local drafts remain in your browser’s local storage (key malleoph.invoice-draft.v1). No invoice data, logo data or client records are transmitted to a remote cloud database without user sign-in.

2. Authenticated user data

When you create an account using email and password, Firebase Authentication stores your authentication credentials. Your profile is recorded in users/{uid}, and drafts you explicitly save to the cloud are stored under users/{uid}/invoiceDrafts/{draftId} with strict security rules enforcing owner-only access.

3. Security and access control

Security rules enforce deny-by-default access. Users cannot read, modify or delete records belonging to another user. Server-side privilege elevation (such as roles, billing status, or payment tokens) cannot be set or modified by client writes.

4. Local files and logos

Uploaded business logos in guest mode are handled as local data URLs within browser memory. Cloud storage of logos requires authenticated user ownership under users/{uid}/company-logos/ and enforces strict MIME type (JPEG, PNG, WebP) and 2 MB size limits.

5. Subprocessors and third-party services

In this phase, Google Firebase (Google Cloud Platform) provides authentication and database infrastructure when configured. Payments (Moneroo), email delivery (Resend) and AdSense integrations are not enabled in Phase 2.

6. Contact and data rights

Users have the right to inspect, export and request deletion of their account data. Contact details will be published prior to production launch.