Gentle Invoice Privacy Policy

This Privacy Policy explains how we, Gentle Invoice, a product of Adeblo LLC, collect, process, and protect your personal data when you use our services. Our registered office is at 30 N Gould St Ste R Sheridan, WY 82801, and you can contact us at hello@adeblo.com. Email is our preferred contact method.

By providing your data or using Gentle Invoice, you agree to this Privacy Policy. If you disagree, please refrain from using our services or providing your data.

We may update this Privacy Policy from time to time at our discretion and in particular to reflect any changes in applicable laws. If we do so, and the changes substantially affect your rights or obligations, we shall take commercially reasonable measures to notify you. Otherwise, you are responsible for regularly reviewing this Privacy Policy.

We may collect your personal data because you provide it to us, or because your employer or a colleague is our client and wishes to set up an account for you to access our platform. In such circumstances, we are the controller of your personal data.

Alternatively, we may receive your personal data through our platform because one of our clients has uploaded your details within their account on our platform. In such circumstances, we are the processor of your personal data, and we shall only process your personal data in accordance with the client's instructions.

This website may include links to third-party websites, plug-ins, and applications (including Integration Apps). Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

We collect personal data to provide our services effectively. Personal data includes identifiable information such as your name, email, email contents, billing address, IP address, and any other information you provide.

2.1 Data You Provide

• Create an account on Gentle Invoice
• Use our invoicing and billing platform
• Contact us with support inquiries
• Apply for a job with us
• Subscribe to updates or newsletters

2.2 Data We Collect Automatically

• Technical details (e.g., browser, device type, and operating system)
• Usage details (e.g., time spent, pages viewed)
• Preferences (e.g., language settings)

3.1 Legal Grounds for Processing

We process personal data based on the following legal grounds:

• Consent (e.g., for marketing)
• Performance of a contract (e.g., providing invoicing services)
• Legal compliance (e.g., tax reporting)
• Legitimate interests (e.g., improving services)

We shall process all such personal data in accordance with this Privacy Policy. Certain personal data is mandatory to be provided to us in order that we can fulfil your request, for example to provide services to you, and we shall make this clear to you at the point of collection of the personal data.

Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. In this case, we may have to cancel a product or service you have with us, but we will notify you if this is the case at the time.

All personal data that you provide to us must be true, complete, and accurate. At our request, you shall promptly provide evidence of your identity. If you provide us with inaccurate or false data, and we suspect or identify fraud, we will record this, and we may also report this. When you contact us by email or post, we may keep a record of the correspondence and we may also record any telephone call we have with you.

3.2 Using Data from Connected Google Services

If we have received your personal data because you have chosen to Sign in with Google, we will process your personal data to perform any contract we have entered into with your employer or in relation to any steps we take at the request of your employer prior to entering into a contract. In particular, this includes providing you with access to the Adeblo application.

Gentle Invoice, a product of Adeblo LLC, is providing an invoice management application. If we have received personal data because you have chosen to connect your Gmail account we will collect your data from this service in order to enhance the email, file and contact management experience and improve your productivity when using the Adeblo application. In particular, this includes access to your Google user data from within in the Gentle Invoice application where you can view your data in the relevant context of invoice management application.

3.3 Using Data You Uploaded

If we have received your personal data because you uploaded it to our platform, we shall process that personal data for any of the lawful purposes described above and on your instructions.

3.4 Using Data for Our Legitimate Interests

We may also use your personal data for our legitimate interests, including dealing with any customer services you require, for regulatory and legal purposes (for example anti-money laundering and fraud prevention purposes), for audit purposes and to contact you about changes to this Privacy Policy.

Some or all of your personal data may be stored or transferred in the United States, where our company is based. Personal data will be stored on servers located in the United States or other countries as necessary to provide our services.

When transferring personal data outside of the United Kingdom (UK) or European Economic Area (EEA), including to the United States where our company is based, we ensure that appropriate safeguards are in place to protect your data. These safeguards may include entering into legally approved agreements, such as the European Commission's Standard Contractual Clauses (SCCs) or the UK's International Data Transfer Agreement (IDTA) or Addendum. Additionally, we may rely on the EU-US Data Privacy Framework (DPF) or the UK extension to the DPF, where applicable, to ensure compliance with international data protection standards.

For more information about the specific transfer mechanisms we use to protect your personal data, please contact us via email.

For our legitimate interests, we may share your personal data with any service providers, sub-contractors, and agents that we may appoint to perform functions on our behalf and in accordance with our instructions, including payment providers, IT service providers, accountants, auditors, and lawyers. We shall provide our service providers, sub-contractors, and agents only with such of your personal data as they need to provide the service for us and if we stop using their services, we shall request that they delete your personal data or make it anonymous within their systems.

In order to comply with our legal obligations, under certain circumstances we may have to disclose your personal data under applicable laws and/or regulations, for example, as part of anti-money laundering processes or to protect a third party's rights, property, or safety.

For our legitimate interests, we may also share your personal data in connection with, or during negotiations of, any merger, sale of assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company in which case we will send a notice to our users.

We ensure that all partners adhere to strict data protection standards.

We shall process your personal data in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage. We do this by using appropriate technical or organizational measures, for example, all information you provide to us is stored on our secure servers and our employees are required to comply with all applicable data protection laws.

Security procedures are in place to protect the confidentiality of your data, including encryption of all or certain parts of your data, especially sensitive data.

If you are our client and you wish to send to us personal data to host on our platform, we shall both comply with our obligations under the Gentle Invoice Customer Agreement.

Notwithstanding the above, you acknowledge that no system can be completely secure. Therefore, although we take these steps to secure your personal data, we do not promise that your personal data will always remain completely secure. If there is a security breach, we will do all that we can as soon as we can to stop the breach and minimize the loss of any data.

You have a number of rights under applicable data protection legislation. Some of these rights are complex, and not all of the details have been included below. Further information can be found here.

• Right of access: You have the right to obtain from us a copy of the personal data that we hold for you.
• Right to rectification: You can require us to correct errors in the personal data that we process for you if it is inaccurate, incomplete, or out of date.
• Right to portability: You can request that we transfer your personal data to another service provider.
• Right to restriction of processing: In certain circumstances, you have the right to require that we restrict the processing of your personal information.
• Right to be forgotten: You also have the right at any time to require that we delete the personal data that we hold for you, where it is no longer necessary for us to hold it. However, whilst we respect your right to be forgotten, we may still retain your personal data in accordance with applicable laws.
• Right to stop receiving marketing information: You can ask us to stop sending you information about our services, but please note we shall continue to contact you in relation to any matters relating to your report.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we could refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us to confirm your identity and ensure your right to access your personal data or to exercise any other right. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request so we can deal with it promptly.

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

If we are a processor of your data (and our client is the controller) we shall only process your personal data as instructed by our client. You will need to contact our client directly if you wish to exercise your rights in relation to the data processed on our platform. If you do contact us directly, we will notify our client as soon as reasonably practical and assist our client as the controller by taking appropriate measures to enable the fulfilment of our obligations to you.

If you have any complaints regarding this Privacy Policy or the processing of your personal data, please contact us directly. We will review and investigate your complaint and aim to respond within a reasonable time. If you believe your concerns have not been adequately addressed, you may also contact the Federal Trade Commission (FTC) at www.ftc.gov or, if you are based outside the United States, reach out to your local data protection authority.

To exercise your rights, contact us at hello@adeblo.com

We will retain personal data in accordance with applicable laws.

If we have received your personal data because you are an employee of a client, we shall retain your personal data until we no longer work with your employer, except where we are required to retain personal data for a particular period of time to comply with legal, auditory, or statutory requirements, including requirements of HMRC in respect of financial documents.

If we have your personal data because a client has uploaded it to our platform, we shall retain it in accordance with our client's instructions.

In some circumstances you can ask us to delete your data: see 'Your rights' above for further information.

In some circumstances we will anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

If any provision of this Privacy Policy is found by a court of competent jurisdiction to be invalid or unenforceable, that provision shall be interpreted as closely as possible to reflect the intentions of the parties, and the remaining provisions shall remain in full force and effect.

This Privacy Policy is governed by and construed in accordance with the laws of the United States and the State of Wyoming, without regard to its conflict of law principles. You agree to submit to the exclusive jurisdiction of the courts located in Wyoming.

You can contact us with any questions or comments about your Personal Data, this Policy, or any other privacy-related enquiries by emailing hello@adeblo.com.