We keep as little as possible.

What we store

Only what’s printed on the invoice: the two names you type, the charges and amounts, any non-cash settlement, the memo, and, if the recipient disputes it, their statement. First names are plenty. Please don’t put anyone’s address, phone number, or anything sensitive on an invoice.

What we don’t

• No accounts, passwords, or sign-ups.
• No email addresses or phone numbers. You send invoices through your own apps, so we never see who you send them to.
• No payment details. No money changes hands, ever.
• No advertising trackers or third-party cookies.

Who can see an invoice

Every invoice lives at a long, random, unlisted link. Anyone who has the link can view it and respond to it, so share it the way you’d share any private joke. Invoice pages are marked so search engines don’t index them, and there is no public directory or feed.

Usage events

We count a handful of anonymous events (an invoice was created, shared, viewed, answered) to understand whether the product works. These aren’t tied to a person, device, or cookie.

Abuse prevention

To stop automated abuse we limit how quickly invoices can be created. That uses a salted, one-way hash of your IP address. The IP itself is never stored, and the hashed counters expire within a day.

Your browser

Your name and a list of invoices you’ve issued are saved in your browser’s local storage, so next time you don’t have to retype your name and your own invoices show the sender’s view. That data stays on your device.

Service providers

Invoices are stored with Supabase and served by our hosting provider, who process data on our behalf and for no other purpose.

Removal

Use “Report this invoice” on any invoice page, or email hi@found.do with the link and we’ll delete it.