Privacy Policy

How IndieHQ protects and handles your personal information

Last updated: 20 June 2025

1. Overview

IndieHQ (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our invoice management service.

We are based in the United Kingdom and comply with UK GDPR and Data Protection Act 2018.

2. Information We Collect

2.1 Account Information

When you register for IndieHQ, we collect:

  • Business name
  • Email address

2.2 Business Data

When you use our service, you may store:

  • Client information (names, contact details, addresses)
  • Invoice details and line items
  • Payment records and transaction references
  • Expense records and receipts

2.3 Usage Analytics

We use Google Analytics to understand how our service is used, including:

  • Pages visited and features used
  • Device and browser information
  • General location (country/region level)

3. How We Use Your Information

We use your information solely to:

  • Provide and maintain the IndieHQ service
  • Create and manage your account
  • Store and organize your business data
  • Improve our service through usage analytics
  • Communicate with you about your account or service updates

🔒 We never share, sell, or use your client data for any purpose other than providing our service to you.

4. Data Storage and Security

4.1 Storage Location

Your data is stored securely using Supabase, a trusted database platform with enterprise-grade security measures.

4.2 Security Measures

  • End-to-end encryption for data transmission
  • Secure database hosting with regular backups
  • Access controls and authentication
  • Regular security updates and monitoring

4.3 Data Retention

We retain your data for as long as your account is active. When you delete your account, all associated data is permanently removed within 30 days.

5. Financial Information

Important: IndieHQ does not handle actual payments or store financial credentials. We only track payment statuses and references that you provide.

We do not:

  • Process credit card or bank account information
  • Handle money transfers or payments
  • Store sensitive financial credentials
  • Act as a payment processor or financial institution

6. Your Rights (UK GDPR)

Under UK GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your personal data
  • Portability: Export your data in a machine-readable format
  • Objection: Object to processing of your personal data
  • Restriction: Request limitation of data processing

To exercise any of these rights, please contactsupport

7. Cookies and Tracking

We use minimal cookies and tracking:

  • Essential cookies: Required for login and account functionality
  • Analytics cookies: Google Analytics to improve our service

You can control cookie settings in your browser. Disabling essential cookies may impact service functionality.

For detailed information, see our Cookie Policy.

8. Third-Party Services

We use these trusted third-party services:

  • Supabase: Database hosting and authentication
  • Google Analytics: Usage analytics and insights

These services have their own privacy policies and security measures. We do not share your data beyond what's necessary for service functionality.

9. Policy Updates

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through the service.

Continued use of IndieHQ after changes constitutes acceptance of the updated policy.

10. Contact Information

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Response Time: 24-48 hours

Business Hours: 9am - 4pm GMT

Questions about your privacy?

We're here to help. Contact our support team for any privacy-related questions.