This policy describes the intended operation of True Invoice. Specific infrastructure providers and retention periods may change as the service evolves; material changes will be reflected here.
Overview and scope
True Invoice (“True Invoice,” “we,” “us,” or “our”) provides cloud-based quoting, invoicing, FBR workflow, document delivery, customer management, and payment-recording tools. This policy applies to information handled through our public website, account onboarding, authenticated application, support channels, and related services.
Businesses using True Invoice decide what customer and transaction information they enter. For that business content, the account’s company generally controls the purpose of processing, while True Invoice processes it to provide the service.
Information we collect
Account and identity information
Name, email address, phone number, authentication records, profile details, email-verification status, Google sign-in identifiers when used, and account preferences.
Company and tax configuration
Company name, addresses, contact details, country, currency, NTN/STRN or other tax identifiers, province, invoice numbering, branding, payment terms, FBR environment settings, and related configuration.
Billing and customer content
Customer details, products and services, quotes, invoices, line items, prices, discounts, tax calculations, HS codes, payment records, notes, documents, approval activity, delivery history, and FBR submission records and responses.
Technical and usage information
IP address, browser and device information, timestamps, pages and features used, diagnostic events, security logs, error records, and cookie or local-storage preferences.
Support communications
Messages, attachments, and troubleshooting context you provide when contacting us. Do not send passwords or private credentials through ordinary support email.
How we use information
- Provide, operate, secure, and maintain the platform.
- Create accounts, manage company memberships, and apply role-based access.
- Generate quotes, invoices, PDFs, reports, and customer records.
- Validate invoice readiness and carry out requested FBR/PRAL workflow actions.
- Deliver requested email or sharing functions and preserve delivery history.
- Record payments and calculate outstanding balances.
- Provide support, diagnose errors, prevent abuse, and improve reliability.
- Communicate service, security, account, and policy updates.
- Meet legal obligations and enforce our Terms & Conditions.
Where a particular legal basis is required, processing may rely on performing our agreement, legitimate operational and security interests, consent, or compliance with law, depending on the context.
How information may be shared
We do not sell personal information. We may share information only as reasonably necessary with:
- Service providers: hosting, databases, file storage, email delivery, authentication, monitoring, support, and security providers operating under contractual or technical controls.
- Government integrations: FBR, PRAL, or related endpoints when an authorized user requests a submission or validation workflow.
- Company users: owners and members of the company to which a record belongs, according to their permissions.
- Legal and safety recipients: authorities, advisers, or affected parties when required by law or reasonably necessary to protect rights, users, and the service.
- Business-transfer recipients: a successor involved in a merger, financing, acquisition, restructuring, or sale, subject to appropriate safeguards.
FBR and PRAL-related processing
When your company enables an FBR workflow, True Invoice may transmit seller, buyer, invoice, item, tax, and credential-related information to the configured government or integration endpoint. Returned statuses, validation messages, IRN, USIN, QR information, and other references may be stored with the invoice.
Your company is responsible for ensuring it is authorized to submit the information, that the information is accurate, and that credentials and registration details are valid. Do not use production credentials in a testing environment.
Data retention
We retain information while an account is active and as needed to provide the service, maintain financial and submission history, meet legal or contractual requirements, resolve disputes, prevent abuse, and preserve backups. Retention may differ by record type. Backup copies may remain for a limited period after deletion from the active system.
Some financial, tax, audit, or security records may need to be retained even after an account closes. Where deletion is appropriate, information may be deleted, anonymized, or isolated from ordinary use.
Security
We use administrative, technical, and organizational measures intended to protect information, including authenticated access, company-level record separation, role controls, encrypted transport in production, restricted credentials, controlled storage, logging, backups, and monitoring where configured.
No internet service can guarantee absolute security. Account holders must use strong passwords, protect devices and credentials, limit team access, and promptly report suspected unauthorized activity.
Your choices and requests
Depending on your relationship with us and applicable law, you may request access, correction, export, deletion, restriction, or objection concerning your personal information. You can update many account and company details directly in the application.
If your information appears in a customer’s invoice or account, contact that business first because it controls the business record. We may need to verify identity, authority, and company ownership before completing a request.
Cookies and local storage
True Invoice may use necessary cookies for authentication, session security, and application operation. Browser local storage may remember interface preferences to improve your experience. Future analytics or marketing tools, if introduced, will be addressed through appropriate notice and controls.
International processing
Cloud and service providers may process information in countries other than Pakistan. Where applicable, we use contractual, technical, and organizational safeguards appropriate to the service and information involved.
Children
True Invoice is a business service and is not directed to children. Users must be legally capable of entering an agreement or act through an authorized business representative.
Third-party links and services
Our service may connect to third-party services or contain external links. Their privacy practices are governed by their own policies, and True Invoice is not responsible for information processed independently by those services.
Changes to this policy
We may update this policy as the product, providers, or legal requirements change. We will revise the “last updated” date and provide additional notice when a change is material.
Contact us
For privacy questions or requests, email support@trueinvoice.pk. Include enough information to identify your account and request, but do not send passwords, private keys, or FBR credentials.