Privacy Policy

This Privacy Policy explains what information [COMPANY LEGAL NAME] ("Facture", "we", "us") collects when you use the Facture website and the Facture app (together, the "Service"), how we use it, and the choices you have. If you have questions, email us at [CONTACT EMAIL].

Who this policy covers

Facture is time tracking, budgeting and invoicing software for studios. Three groups of people come into contact with it:

• Studio users. People who sign in to Facture as members of a studio's workspace.
• Studio clients. People and companies a studio bills through Facture. They receive invoices and estimates and may pay or accept them on a page we host, without having a Facture account.
• Website visitors. Anyone who visits this website.

Our role

For information about studio users and website visitors, we decide how it is used, and this policy applies directly.

For the information a studio puts into its workspace (its clients and contacts, projects, rates, time, expenses, receipts, estimates and invoices), the studio decides what goes in and how it is used. We process that information on the studio's behalf to provide the Service. If you are a studio client and have a question about your information, contact the studio that billed you. We will help them respond.

Information we collect

Account information

You sign in to Facture with Google. When you do, Google shares your name, email address and profile photo with us. We use them to create your account, identify you to the other members of your workspace, and keep you signed in.

Google Calendar, if you connect it

Connecting Google Calendar is optional and separate from signing in. If you connect it, Facture asks Google for read-only access to your calendar (the calendar.readonly scope) so it can show your meetings next to your tracked time and let you turn a meeting into a time entry.

• Events are read only while you are viewing the calendar in Facture. We do not copy your calendar into our database.
• When you log time from a meeting, the resulting time entry keeps that event's ID, and Facture remembers which project and task you logged that meeting to, so the next occurrence can be suggested for the same place.
• We never create, change or delete anything in your calendar.
• You can disconnect at any time from Facture's settings, or by removing Facture's access in your Google Account at myaccount.google.com/permissions.

Workspace content

This is the information a studio and its users enter or import: clients, client contacts and their email addresses, projects, budgets, billing and cost rates, time entries and notes, expenses and receipt files, estimates, invoices, payment records, and settings such as the studio's name, logo and invoice wording. When a client accepts an estimate on a hosted page, we record that it was accepted and when.

Imports from Harvest

If a studio imports its history from Harvest, we use the credentials or export files it provides to read its Harvest data, and we write that data into its workspace. Import credentials are used only for the import.

Payment information

Studios collect payments through their own Stripe account, connected to Facture. Card and bank details entered on a payment page go directly to Stripe. We never receive or store full card numbers or bank account numbers. From Stripe we receive the status of each payment (for example, paid, pending or failed), the amount, the date, and the last four digits or bank name Stripe shows for the payment method.

Connected services

If a studio connects Slack or QuickBooks Online, we store the access tokens those services issue, encrypted at rest, and exchange the information needed for the connection to work: in Slack, messages Facture posts and the commands people send it; in QuickBooks, customers, invoices and payments the studio chooses to sync.

Email

Facture sends email on behalf of studios (invoices, estimates, payment reminders) and to studio users (invitations, reminders to log time, notifications). We keep a record of what was sent, to whom and when, so the studio can see it.

Usage and technical information

Like most web services, our servers record technical information when you use the Service: IP address, browser and device type, pages requested, and timestamps. When something goes wrong, we capture an error report with technical details about the failure so we can fix it.

Cookies

We use cookies that are strictly necessary for the Service to work, such as the cookie that keeps you signed in. We do not use advertising cookies. If we add analytics to this website, we will ask for your consent first where the law requires it, and you can change your choice at any time.

How we use information

We use the information above to:

• Provide, maintain and secure the Service, including sending the emails a studio asks Facture to send.
• Respond to support requests and communicate with you about the Service, including changes to it or to this policy.
• Diagnose problems and improve the Service.
• Comply with the law and enforce our Terms of Service.

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use workspace content to train artificial intelligence or machine learning models.

Google user data

Facture's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, information we receive from Google, including calendar data:

• Is used only to provide and improve the user-facing features described in this policy.
• Is not transferred to others except as needed to provide those features, to comply with the law, or as part of a merger, acquisition or sale of assets with notice to you.
• Is not used for advertising, including retargeting, personalized or interest-based ads.
• Is not read by people, except with your permission, where needed for security purposes such as investigating abuse, to comply with the law, or where the data has been aggregated and anonymized for internal operations.
• Is not used to develop, improve or train generalized artificial intelligence or machine learning models.

How we share information

We share information only in these cases:

• Within your workspace. Members of a studio's workspace see that workspace's content according to their role. Partner-level members can see cost rates and margin.
• With a studio's clients. When a studio sends an invoice or estimate, its client sees what the studio put on it.
• With service providers who process information for us under contracts that limit their use of it to providing services to us:
  • Netlify (website and app hosting)
  • Neon (database)
  • Cloudflare (file storage and PDF generation)
  • Mailgun (email delivery)
  • Stripe (payments, using the studio's own connected account)
  • Sentry (error monitoring)
  • Google (sign-in and, if connected, Google Calendar)
  • Sanity (content for this website; it holds no workspace content)
• With services you connect. When a studio connects Slack or QuickBooks, we send them the information that connection needs.
• For legal reasons. To comply with law, legal process or a lawful request from authorities, and to protect the rights, safety and property of our users, the public or Facture.
• In a business transfer. If Facture is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

How long we keep information

We keep workspace content for as long as the studio's workspace is active. When a studio closes its workspace, we delete its content within [90] days, except where we must keep it longer to meet legal, tax or accounting obligations. Backups are overwritten on a rolling schedule. Server logs and error reports are kept for a limited period and then deleted.

Financial records such as invoices and their audit trail are kept unchanged while the workspace exists, because studios rely on them as a record of what they billed.

Security

We protect information with encryption in transit (HTTPS), encryption of integration tokens at rest, access controls limited to people who need it, and an audit trail of changes to invoices and billed time. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a security incident that affects your personal information, we will notify you as the law requires.

Your choices and rights

• Access and correction. You can view and update your profile in Facture at any time.
• Export. Studios can export their workspace content from the Service.
• Deletion. You can ask us to delete your account. If your information sits inside a studio's workspace, we will work with that studio on the request.
• Google access. You can disconnect Google Calendar in Facture's settings or revoke Facture's access in your Google Account.

Depending on where you live, you may have additional rights, such as the right to know what personal information we hold about you, to have it deleted or corrected, to object to or restrict certain processing, and to not be discriminated against for exercising these rights. To make a request, email [CONTACT EMAIL]. We will verify your request before acting on it and respond within the time the law requires.

International transfers

Facture is operated from the United States, and our service providers may process information in the United States and other countries. Where the law requires it, we use appropriate safeguards for these transfers.

Children

The Service is for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy as the Service changes. When we do, we will change the "Last updated" date above, and if the changes are material we will notify studio users by email or in the app before they take effect.

Contact us

[COMPANY LEGAL NAME]
[MAILING ADDRESS]
[CONTACT EMAIL]