Privacy Policy
Last updated November 1, 2026
Who we are
InvoiceFlow is operated by HastaRex Holdings LLC, a Wyoming limited liability company. Email blain@hastarex.com with any privacy question or request.
What we collect
Account details (name, email, company, role), the documents you upload such as invoices and receipts, and everything created from them, including vendor, pricing, line-item, job, cost code, purchase order, payment and reimbursement information. We also collect usage information: the pages and features you use, device, browser, IP address and log data, and information collected through cookies and similar technologies on our apps and websites.
How we use it
To run InvoiceFlow for your company (extracting invoice and receipt data, matching it to jobs and purchase orders, routing approvals, reporting job costs and billing your subscription), and also to analyze, improve and develop our products, train and improve AI models, create aggregated and de-identified benchmarks, price and cost indexes and reports, market our services, and generate revenue from the data as described below and in our Terms of Service.
Who we share and sell it to
Inside the app, your company's records are visible only to your company's users. Outside the app, we share data with service providers that run InvoiceFlow, such as Stripe for payments and our hosting, AI processing and email providers. We may also sell, license or share data, including aggregated and de-identified data and, subject to applicable law, other collected information, with third parties such as suppliers, manufacturers, distributors, contractors, lenders, insurers, researchers, advertising and data partners. Data may also be transferred as part of a merger, acquisition or sale of assets.
Your choices and rights
You may request a copy, correction or deletion of your personal information, or opt out of the sale or sharing of your personal information, by emailing blain@hastarex.com with the subject "Do Not Sell or Share My Personal Information" or "Privacy Request". We honor the rights that apply under the law where you live. Aggregated and de-identified data that no longer identifies you is not covered by these requests.
How long we keep it
We may keep collected information, including after an account is closed, for as long as it is useful for the purposes above, except where the law requires us to delete it. Uploaded documents are stored privately and served to your company through short-lived signed links.
Changes
When this policy changes, the date at the top will change and material updates will be announced in the app or by email.