Privacy policy
Plain English: we collect as little as possible, we don't sell it, and we never hold your money.
Last updated 2 November 2026
Who is responsible for your data
SatInvoice is operated by Noor Intelligence (Bala Danmeri), Wincanton, Somerset, United Kingdom, the "controller" of your account data under UK data protection law (UK GDPR). Contact: info@baladanmeri.com.
The invoices you create contain details of your clients. For that information you are the controller and we process it on your behalf, only to provide the service.
What we collect
- Account: your email address and a one-way hash of your password (we can't see your password).
- Invoices: what you enter: your and your client's names and details, line items, amounts, notes, due dates, Lightning address, and VAT rate.
- Emails you send through SatInvoice: the recipient address, and when it was sent.
- Unlock payments: the amount, status and a Lightning payment request. Payments go over the Lightning network; we never receive card or bank details.
- Settings: your default currency (and branding/payment settings for the site operator).
Cookies and local storage
We use one strictly necessary cookie to keep you signed in (it expires after 30 days or when you sign out). We don't use analytics, advertising or tracking cookies. Your browser also stores your in-progress invoice draft locally on your own device so you don't lose your work; that never leaves your device unless you save the invoice.
How we use it
- To run your account and show, share, email and export your invoices.
- To process the one-time unlock payment and confirm it.
- To reply when you contact us.
Our lawful basis is performing our contract with you (providing the service you signed up for) and our legitimate interest in keeping the service secure. We don't use your data for marketing and we never sell it.
Who we share it with
Only the providers needed to run the service:
- Vercel: hosting (app servers in Dublin, Ireland).
- Supabase: database (Ireland, EU).
- Resend: delivers invoice emails you choose to send (EU sending region).
- Lightning payment providers: to create the unlock payment request; no personal data is sent.
- Bitcoin price services (blockchain.info, CoinGecko): to fetch live prices; no personal data is sent.
Some of these companies are based in the US; where data leaves the UK it's protected by the safeguards UK law requires (such as the UK–US data bridge or standard contractual clauses).
How long we keep it
We keep your account and invoices for as long as your account exists. Email us to delete your account and we'll erase your data within 30 days, except anything we must keep by law.
Your rights
You can ask to access, correct, export or delete your data, or object to how we use it: email info@baladanmeri.com. If you're unhappy with our answer, you can complain to the UK Information Commissioner's Office at ico.org.uk.
Security
All connections are encrypted (HTTPS), passwords are hashed, secrets are stored encrypted, and shared invoice links use long random tokens that can be revoked at any time.
Changes
If we change this policy we'll update the date above, and tell account holders by email if the change is significant.