Last updated October 7, 2026
Privacy Policy
Invoice fields, logos, local records, generated PDF bytes, and Output Check results stay in this browser. Mallow Invoice does not upload them to an application server.
Invoice details and logos
Seller, customer, address, email, tax ID, line item, amount, date, note, term, payment instruction, and selected logo data are processed by application code in the browser. They are not intentionally placed in a URL, cookie, analytics event, application request, or server database.
Local draft and issued records
Save draft stores a draft snapshot. Successful Create & check PDF also saves an issued snapshot in an IndexedDB database named mallow-invoice. It may include every visible invoice field and the chosen logo. Typing alone does not save invoice details. If browser storage is unavailable, a checked PDF can still be downloaded in this tab, but the app reports that its snapshot could not be saved.
Backups and deletion
Export backup creates a JSON file containing the local records. Import reads only a file you choose, rejects oversized or unexpected data, and merges valid version-one records while keeping a local conflict or importing it as a new copy. Delete all local invoice data clears this app's IndexedDB records in the current browser profile. Browser backups, downloaded files, or copies outside this origin are not controlled by that button.
PDF creation and Output Check
PDF bytes are created in the tab and reopened there with a separate PDF reader that parses and renders every page before matching visible output. The app does not persist PDF blobs in IndexedDB. A saved issued record keeps only the invoice snapshot, check time, and output hash; Download again creates and checks a fresh file.
Download, print, and share
Download asks the browser to save the file. The print action opens the checked PDF in a browser viewer so you can choose its Print command. Share sends a checked file to the operating-system share target only after you press Share. Those destinations have their own privacy behavior.
Hosting and advertising
The host may process routine request data such as IP address, user agent, requested URL, time, and security logs to deliver the site. Production includes a non-executable Google AdSense ownership meta tag, but this invoice origin loads no ad runtime, third-party analytics, ad units, or consent vendor script.
Questions
Email gensio.support@gmail.com. Do not attach a real invoice, customer details, payment instructions, tax identifiers, or confidential logo when reporting a problem.