itsme invoicey.ITSMe Technology (“ITSMe”, “we”, “us”) provides itsme invoicey, a business invoicing and operations workspace available through the web application and Android application. This policy applies to itsme invoicey and its related services at itsmesto.lk.
1. Information we collect
Account and contact information
When an account is created, we may collect the user’s name, email address, phone number, username, company name and business address. We also process password credentials for authentication; passwords are not displayed to us in plain text.
Business records
Users may enter customer and supplier names, addresses, email addresses, phone numbers, quotations, proforma invoices, final invoices, payments, projects, products, services, purchases, expenses, warranty records, repair notes and related financial details.
Uploaded content
Users may upload documents or images such as expense bills, company logos, supporting records and repair or warranty evidence. Images may be resized or compressed by the application to support efficient storage and display.
Security and technical information
We process session information, audit events, verification-code status and basic technical request information when needed to sign users in, protect accounts, prevent abuse and operate the service.
2. How we use information
- Create and secure business workspaces and user accounts.
- Send one-time verification and password-recovery codes.
- Generate, store and display quotations, proforma invoices, invoices, purchase records, reports and backups.
- Link customers, suppliers, projects, expenses, payments, stock and after-sales records as directed by the user.
- Provide support, troubleshoot errors, maintain security and improve reliability.
- Meet legal, accounting, fraud-prevention and dispute-resolution obligations when applicable.
We do not use account or business records for targeted advertising.
4. Security and retention
We use HTTPS where available, authenticated sessions, access controls, company separation, audit records and protected server storage. No online service can guarantee absolute security, so users should keep passwords private and report suspected compromise promptly.
We retain account and business records while the workspace is active or as needed for legitimate accounting, legal, security and support purposes. Backups may be retained for recovery and are protected with the related company records. Downloaded copies, device caches and third-party provider snapshots may be outside our direct control.
5. Account and data deletion
To request deletion, contact us from the account email and include the company name and username. We will verify ownership before acting. A platform administrator can also schedule permanent company deletion from the Administrator Control Panel; access is blocked immediately and the selected deletion deadline may be 5 minutes, 24 hours or 48 hours.
When a verified company deletion is completed, the app-managed company database, attachments, memberships, business records and app-managed backups are removed. Shared users and other companies are not deleted. We may retain information where required by law, for unresolved disputes, or in secure provider backups until their normal expiry.
6. Contact us
Questions, privacy requests and security reports can be sent to:
7. Changes to this policy
We may update this policy when the app, data practices or legal requirements change. The effective date at the top of this page will be updated when a new version is published.