Privacy Policy
Last updated 2026-11-06
1. Who we are
SIKKA Invoice (“SIKKA”, “we”) is an online invoicing and financial management service available at invoice.sikkateam.com.
Requires legal review: Insert the legal entity name, registered address, registration number and the data controller's contact details.
2. Information we collect
Account information: your name, email address, password (stored only as a secure hash by our authentication provider) and language preference.
Business information you enter: your organization's details, clients, products, invoices, quotes, payments, expenses, tax settings, logo and receipt files.
Technical information: the time zone your browser reports at registration, interface preferences stored in cookies, and error reports needed to keep the service working.
3. How we use information
To provide the service: storing your records, generating documents and reports, and sending account emails such as confirmation and password-reset messages.
To protect the service: preventing automated abuse (CAPTCHA), enforcing plan limits and rate limits, and diagnosing errors.
We do not sell personal information and we do not use your business records for advertising.
4. Legal bases
We process information to perform our contract with you, to comply with legal obligations, and for our legitimate interest in operating a secure service.
Requires legal review: Confirm the legal bases for each purpose under the laws that apply to your customers (for example GDPR, UK GDPR, Jordan's Personal Data Protection Law).
5. Service providers
We use service providers that process data on our behalf: Supabase (database, authentication and file storage), Vercel (application hosting), Cloudflare Turnstile (bot protection on sign-in and registration), an email delivery provider for account emails, and, if enabled, Sentry (error monitoring, with personal data masked).
Requires legal review: Confirm the final list of processors, their data-processing agreements and the regions where data is stored.
6. International transfers
Our providers may process data in countries other than yours.
Requires legal review: Describe transfer mechanisms (e.g. standard contractual clauses) and the hosting region.
7. Retention
We keep your data while your account is active. When you delete your account, organizations where you are the only member are deleted together with their records and files.
Requires legal review: Set retention periods, including backups, and check record-keeping obligations for invoices and accounting records in relevant countries.
8. Your rights and choices
You can download a copy of your data at any time from Settings → Your account.
You can permanently delete your account from the same page. Organizations shared with other people are not deleted; only your membership is removed.
You may also have rights to access, correct, restrict or object to processing, and to complain to a data-protection authority.
Requires legal review: List the rights applicable in each jurisdiction and how requests are handled.
9. Security
Data is protected by access controls that keep each organization's records separate, encrypted connections (HTTPS), private file storage and audit logs of financial changes. No system is perfectly secure.
10. Cookies
We use essential cookies only: your sign-in session, and your language, theme and sidebar preferences. We do not use advertising or third-party analytics cookies. The bot-protection check may set its own cookies when it is shown.
Requires legal review: Confirm whether a cookie notice is required in your markets.
11. Children
The service is intended for businesses and is not directed to children.
12. Changes
We will update this policy when our practices change and show the date of the latest version at the top of this page.
13. Contact
For privacy questions or requests, contact us.
Requires legal review: Insert a privacy contact email address and postal address (and a representative or DPO if required).