Privacy Policy

Last updated: 30 March 2026

SMASH Invoices ("SMASH", "we", "us", "our") is operated by Daniel Neale (ABN 58 600 491 085), based in Australia. This Privacy Policy explains how we collect, use, and protect your personal information when you use the SMASH Invoices app and website (smashinvoices.com).

By using SMASH, you agree to the collection and use of information in accordance with this policy. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information We Collect

Account information

When you create an account, we collect your name, email address, and business details (business name, ABN if provided).

Voice recordings

When you use the voice-to-quote feature, your voice is temporarily processed to generate a quote. Voice audio is transmitted to our speech processing provider for transcription and is not stored permanently after processing is complete.

Business data

We store the quotes, invoices, and customer records you create in the app. This includes customer names, contact details, job descriptions, pricing, and payment status.

Payment information

Subscription payments are processed by Stripe. We do not store your credit card details. Stripe's privacy policy governs how payment information is handled. Customer payments you collect via SMASH are processed through Stripe Connect.

Usage data

We collect information about how you use the app — features used, quotes sent, session data — to improve the service. This data is aggregated and not used to identify you individually.

Device information

We collect device type, operating system version, and app version for support and debugging purposes.

2. How We Use Your Information

  • To provide and operate the SMASH Invoices service
  • To process your voice input and generate quotes and invoices
  • To send quotes and invoices to your customers on your behalf
  • To process subscription payments and manage your account
  • To send transactional emails (quote confirmations, invoice receipts, payment notifications)
  • To respond to support requests
  • To improve the product through aggregated usage analysis
  • To comply with legal obligations

We do not sell your personal information to third parties. We do not use your business data to train AI models.

3. Third-Party Services

SMASH uses the following third-party services to deliver the product. Each has its own privacy policy:

  • Supabase — database and authentication (supabase.com/privacy)
  • Stripe — subscription billing and customer payment collection (stripe.com/privacy)
  • Deepgram — voice transcription (deepgram.com/privacy)
  • OpenAI — quote generation from transcribed speech (openai.com/privacy)
  • RevenueCat — subscription management for iOS (revenuecat.com/privacy)
  • Apple — App Store distribution (apple.com/privacy)
  • Vercel — website hosting (vercel.com/legal/privacy-policy)

We only share data with these providers to the extent necessary to deliver the service.

4. Data Storage and Security

Your data is stored on servers in Australia and/or the United States via Supabase. We use encryption in transit (TLS) and at rest. Access to your data is restricted to authenticated users and authorised personnel only.

We take reasonable steps to protect your information from misuse, loss, and unauthorised access. However, no method of electronic transmission or storage is 100% secure.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or tax purposes.

Voice recordings are not retained after transcription is complete.

6. Your Rights

Under the Australian Privacy Principles, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your account and associated data
  • Opt out of marketing communications
  • Lodge a complaint with the Office of the Australian Information Commissioner (oaic.gov.au)

To exercise any of these rights, email us at dan@smashinvoices.com.

7. Cookies and Analytics

Our website (smashinvoices.com) uses cookies for basic functionality and may use analytics tools to understand how visitors use the site. You can disable cookies in your browser settings, though some site features may not work correctly.

The SMASH app does not use advertising cookies or tracking pixels.

8. Children

SMASH Invoices is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Your continued use of SMASH after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, contact us:

SMASH Invoices

Daniel Neale

ABN: 58 600 491 085

Byron Bay, NSW, Australia

Email: dan@smashinvoices.com