Legal
Privacy Policy
Last updated 13 September 2026
InvoiceWriteNow is an invoicing service operated by Write Now Agency in South Africa. This policy explains what personal information we collect, why, and the choices you have. We process personal information in line with the Protection of Personal Information Act, 2013 (POPIA).
Information we collect
- Account details: your name, company name, email address and sign-in method (email and password, or Google).
- Business content you enter: company details, logo, banking details, customers, products, invoices and quotations.
- Email settings: if you choose to send from your own address, the SMTP server details you provide.
- Subscription and payment records: your plan, billing cycle and payment status. Card and bank details are entered on PayFast and never reach us.
- Messages you send us through the contact form or by email.
- Basic technical data needed to run and secure the service, such as IP address and browser type.
How we use it
- To provide the service: storing your documents, generating PDFs and sending emails you ask us to send.
- To manage your account, plan, trial and billing, including suspending access when a subscription is unpaid.
- To answer support requests and tell you about important changes to the service.
- To keep the service secure and prevent abuse.
We do not sell your personal information and we do not use your business data for advertising.
Your customers' information
When you add your own customers to InvoiceWriteNow, you decide what is captured and why. You are responsible for having a lawful basis to process their information; we process it on your behalf only to provide the service.
Who we share it with
We use trusted service providers who process information for us under their own security and privacy terms:
- Google Firebase for sign-in, hosting, database and server functions. Data may be stored on servers outside South Africa, with safeguards comparable to POPIA.
- PayFast to process subscription payments.
- Email delivery providers, including the SMTP account you configure, to send invoices, quotations and support replies.
We may also disclose information where the law requires it.
How long we keep it
We keep your account and business content while your account exists, including while it is suspended, so nothing is lost if you return. Financial records may be kept for as long as tax law requires. You can ask us to delete your account and content at any time.
Your rights
Under POPIA you may ask to access, correct or delete your personal information, object to certain processing, and lodge a complaint with the Information Regulator of South Africa. To make a request, email [email protected].
Security
Access to your data is restricted to your account by server-side security rules, traffic is encrypted in transit, and payments are handled by PayFast. No system is perfectly secure, so please use a strong password and keep your sign-in details private.
Changes
We will update this page when our practices change and show the new date at the top.
Questions about this page? Email [email protected].