Fairtab Privacy Policy

Status: DRAFT. Written to be GDPR-aware and to work globally, and checked against Fairtab's actual data model by svnlabs' internal legal team, but this is still not a substitute for review by a licensed attorney. Have it reviewed before launch, particularly the international transfer and legal basis sections. On the EU representative question (GDPR Article 27): the founder's decision, as of this draft, is that Fairtab doesn't need one yet given its early stage and lack of significant, systematic EU user volume — see the note in section 5. This should be revisited (and ideally reviewed by an attorney) if EU usage grows meaningfully. The bracketed placeholders that existed here have now been filled in based on the founder's decisions; the substance still needs an attorney's sign-off before this is relied on for real users.

Last updated: July 17, 2026

1. Who we are

Fairtab is operated by Uptechable Co., Ltd., operating as svnlabs.co ("we," "us," "our"). This policy explains what personal data we collect through Fairtab, why, and what rights you have over it.

If you're in the EU, UK, or another jurisdiction with a data protection authority, you can also raise concerns with your local authority; we'd rather you talk to us first at hello@svnlabs.co.

2. What we collect

If you use the builder without an account, including a one-time pay-per-download, your invoice lives in your browser while you're working on it. When you buy a pay-per-download, we do store a temporary copy of that invoice (your details, your client's name/email/address, line items, and amounts) on our own servers, not just with our payment provider, so we can generate your download and handle any issue with the purchase. That copy automatically expires within 24 hours; we don't keep it as a permanent record tied to an account, because there is no account.

If you create an account, we collect:

• Your email address and authentication details (handled through our authentication provider)
• Your business profile: business name, business email, address, default currency, and, on Pro, your logo and brand colors
• The invoices you choose to save: your details, your client's name/email/address, line items, amounts, dates, notes, and any payment link or bank transfer details you choose to include
• Saved clients: name, email, phone, address, and any notes you add, for repeat billing
• Basic account metadata: your plan, when you signed up, when you were last active
• A record of your Paddle transactions and subscription events (amount, plan, status, and the underlying event data Paddle sends us), kept on our own servers so we can manage your subscription and admin-side reporting, described further in section 6

We don't store invoices as rendered PDF files on our servers. Your invoice is stored as structured data and the PDF is generated in your own browser when you download it.

If you subscribe to Pro or buy a pay-per-download, our payment provider, Paddle, collects and processes your payment details directly. We never see or store your full card details. What we receive from Paddle is transaction and subscription data (amount, plan, status), not your card number, described in section 4.

A small number of people at svnlabs (currently, the founder) can access account and usage data across all users, not just their own account, for product administration, customer support, fraud prevention, and internal reporting (for example, seeing aggregate revenue or how many users are near the free plan's limit). This access is restricted to that internal purpose; it's not used for marketing to you or shared externally.

We don't currently use third-party analytics or advertising trackers. We do use the minimal session cookies our authentication provider sets to keep you signed in; these are functionally necessary for the Service to work and aren't used for tracking or advertising. If we add analytics or advertising trackers later, we'll update this policy and, where required, ask for your consent first.

2a. If you're a client of someone using Fairtab

If someone uses Fairtab to invoice you, your name, email, address, and possibly phone number may be entered into the Service by them, not by you. In that relationship, the Fairtab user is responsible for having a lawful basis to hold and use your information (for example, an existing business relationship with you), and we process it on their behalf to provide the invoicing service, in the same way any invoicing or accounting software would. If you have concerns about how your information was used, your first point of contact is the business that invoiced you; we can also help you exercise your rights over data stored in Fairtab directly if you contact us.

3. Why we use it, and our legal basis

We use your data to:

• Provide the Service: generate invoices, save your data between sessions, run your account
• Process payments and manage your subscription, through Paddle
• Communicate with you about your account (for example, a receipt, a password reset, or a service notice)
• Keep the Service secure and prevent abuse

Where GDPR applies, our legal bases are: performance of a contract with you (running your account and generating invoices), our legitimate interest in keeping the Service secure and working properly, and, for any communications beyond service necessities, your consent.

4. Who we share it with

Processors, who handle data only on our instructions:

• Supabase, our database and authentication provider, which stores your account data, saved invoices, and saved clients
• Infrastructure providers involved in hosting the Service (for example, the servers Supabase and our hosting provider run on)

Paddle is different: it's an independent controller for your payment, not just a processor working on our instructions. Paddle is the merchant of record for anything you buy on Fairtab, which means the payment transaction itself is legally between you and Paddle. Paddle decides how it handles your payment and billing details under its own privacy policy and its own compliance obligations, separately from how we handle the rest of your Fairtab data under this one. We receive transaction and subscription confirmations back from Paddle (see section 2), which we do control under this policy.

We don't sell your data, and we don't share it with advertisers. We only share what's needed to run the Service, or where required by law.

5. International transfers

Fairtab is built to work for freelancers anywhere, so your data may be processed in a country other than the one you're in, including outside the EU/UK/EEA. Our database and hosting infrastructure (Supabase and our hosting provider) run in Southeast Asia (Singapore). Where that means your data is processed outside your own country, including outside the EU/UK/EEA, we rely on the safeguards our processors provide (such as standard contractual clauses) to keep your data protected to the same standard. Paddle, our payment provider, processes payment data under its own compliance framework as an independent controller (see section 4); its processing locations are governed by Paddle's own privacy policy, not this one.

We haven't appointed a representative in the EU under GDPR Article 27. Based on Fairtab's current early stage and the absence of significant, systematic, large-scale processing of EU residents' data, the founder's assessment is that this isn't required yet; this is not a final legal determination, and should be revisited with an attorney if EU usage grows.

6. How long we keep it

We keep your account data and saved invoices for as long as your account is active. If you delete your account, we permanently remove your profile, saved clients, and saved invoices; this is immediate and irreversible once you confirm the deletion. If you downgrade from Pro to Free and end up over the free plan's 5-saved-invoice limit, we don't delete anything: new saves are paused until you're back under the limit, and you can export your data at any time.

We keep a record of your payment transactions and subscription events on our own systems, in addition to whatever Paddle separately retains, for as long as required by tax and accounting law. When you delete your account, this transaction record is disconnected from your identity (it's no longer linked to your profile) but the transaction itself isn't erased, the same way a store keeps a sales record after a customer relationship ends. Pay-per-download invoice copies (see section 2) expire automatically within 24 hours regardless of whether an account exists.

6a. Security

We rely on our processors' standard security practices (encryption in transit, access controls, and industry-standard infrastructure security through Supabase and our hosting provider) and restrict internal access to what's described in section 2. No system is perfectly secure; if we become aware of a breach affecting your personal data, we'll notify you and any required authority as applicable law requires.

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (you can do this yourself, anytime, from your account settings)
• Export your data in a portable format
• Object to or restrict certain kinds of processing
• Withdraw consent, where we rely on it

Deletion is self-serve, from your account settings, immediately. For the others, email us at hello@svnlabs.co; we aim to respond within 30 days. If you're not satisfied with our response, you can complain to your local data protection authority.

8. Children's privacy

Fairtab isn't directed at children. We don't knowingly collect personal data from anyone under 16, or under the minimum age that applies where you live if that's lower (for example, 13 in the United States). If you believe a child has given us personal data, contact us and we'll remove it.

9. Changes to this policy

We may update this policy as the Service changes. If a change is material, we'll let you know before it takes effect, the same way we would for a change to our Terms of Service.

10. Contact

Questions about this policy or your data: hello@svnlabs.co.