Lubabook – Privacy Policy

Last Updated: December 16, 2025

At Lubabook ("we", "us", or "our"), we are committed to protecting your privacy. Lubabook is a cloud-based invoice management platform that helps businesses create, send, track invoices, manage clients, expenses, payments, and related financial records. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Service.

1. Information We Collect

We collect two types of information:

Personal Data

Information that identifies you or your business, such as:

• Account information: Name, email address, phone number, company name, address, and payment details.
• Profile information: Preferences, billing details, and tax information.
• Content you upload: Client/contact details, invoice data, estimates, expenses, and transaction records (which may include personal data of your clients or third parties).

Usage and Non-Personal Data

• Log data: IP address, browser type, device information, pages visited, and time spent.
• Cookies and tracking: We use cookies, web beacons, and similar technologies to improve the Service and analyze usage.
• Aggregated data: Anonymous, aggregated statistics for improving the Service.

2. How We Collect Information

• Directly from you when you register, create invoices, or contact support.
• Automatically through your use of the Service (e.g., via cookies).
• From third-party payment processors (e.g., Stripe, PayPal) only for the purpose of processing your payments.

3. How We Use Your Information

We use your information solely to provide, maintain, and improve the Service, including:

• Processing invoices, payments, and subscriptions.
• Communicating with you (e.g., support, service updates, billing notifications).
• Improving functionality, detecting fraud, and ensuring security.
• Complying with legal obligations (e.g., tax reporting and financial record retention).

We do not share, sell, rent, or disclose your personal data to any third parties except as strictly necessary for operating the Service or as required by law.

4. Limited Data Sharing

Your data is processed only by Lubabook and trusted infrastructure providers that help us run the Service. We share information only in the following limited circumstances:

• Payment processors: Card and payment details are handled directly by certified payment providers (e.g., Stripe, PayPal). We do not store full card numbers on our servers.
• Hosting and cloud infrastructure: Data is stored on secure servers operated by reputable providers under strict confidentiality agreements.
• Email delivery: Transactional emails (e.g., invoices, password resets) are sent through trusted email service providers.
• Legal requirements: When required by law, court order, or to protect our rights and safety.
• Business transfers: In the unlikely event of a merger, acquisition, or sale of assets.

We do not share your data with advertisers, analytics companies, marketing partners, or any other third parties for their own purposes. All service providers are contractually obligated to protect your data and use it only to deliver services to Lubabook.

5. Data Security

We implement industry-standard security measures, including encryption in transit and at rest, firewalls, access controls, and regular security audits, to protect your data. While no system is completely secure, we take all reasonable steps to safeguard your information.

6. Data Retention

We retain your personal data only as long as necessary for providing the Service, maintaining your account, or meeting legal requirements (e.g., financial records for 7–10 years, depending on jurisdiction). Anonymized data may be retained longer for internal improvements.

7. Your Rights and Choices

Depending on your location, you have the right to:

• Access, correct, update, or delete your personal data.
• Object to or restrict processing.
• Request data portability.
• Withdraw consent (where applicable).
• Opt out of marketing communications (we send only service-related emails).

For deletion requests, please refer to our Data Deletion Instructions. Note that certain financial records may be retained or anonymized as required by law.

GDPR (EU/EEA Users)

We process your data based on contract performance, legitimate interests, or consent. You have all rights listed above. Contact our Data Protection Officer at privacy@lubabook.com.

CCPA/CPRA (California Users)

We do not sell or share your personal data. You have rights to know, delete, correct, and opt out. We do not discriminate for exercising your rights.

8. International Data Transfers

Your data may be processed in countries outside your residence (e.g., USA). We use appropriate safeguards, such as Standard Contractual Clauses, to ensure compliant transfers.

9. Children's Privacy

The Service is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Policy from time to time. Changes will be posted on this page with the updated date. Your continued use of the Service constitutes acceptance of the updated Policy.

11. Contact Us

If you have any questions, requests, or concerns:

• Email: privacy@lubabook.com or support@lubabook.com
• For GDPR-related complaints: Contact your local Data Protection Authority.

Thank you for trusting Lubabook with your data!