Legal
ZappInvoice – Data & Privacy Policy
Operated by Hypermint Digital Pty Ltd, Australia | ABN: 67 697 383 887
Effective date: 8 October 2026
ZappInvoice is an Australian-focused business administration platform for sole traders, freelancers and small businesses. We are committed to protecting your information and handling it in accordance with applicable Australian privacy laws.
1. What information does ZappInvoice collect?
We collect information necessary to provide our services, including business and contact details, customer information, invoices, quotes, expenses, receipts, payment records, business bank details and account information. We use this information to operate our services, process payments, provide support, maintain security and meet applicable legal obligations.
2. Where is my information stored?
ZappInvoice's application is hosted on Hostinger VPS servers located in Malaysia, with database services provided by MongoDB Atlas. The location of the MongoDB Atlas database has not yet been confirmed. Some information may be processed or stored overseas by technology partners. We take steps required by applicable Australian privacy laws relating to overseas disclosures.
3. How is my information protected?
We use security measures including encrypted HTTPS connections, password hashing, secure authentication, access controls and restricted server access. While we take reasonable precautions, no online service can guarantee absolute security.
4. Does ZappInvoice store my credit card details?
No. Payments and Tap to Pay transactions are processed through Stripe. ZappInvoice does not store full card numbers, expiry dates or security codes. We retain limited transaction information, including payment amounts, statuses and Stripe reference IDs.
5. Which third-party services does ZappInvoice use?
Hostinger and MongoDB Atlas: hosting and database storage; Stripe: payments and Tap to Pay; Microsoft 365: transactional emails; Firebase: push notifications; Google Gemini: OCR receipt scanning only; GoDaddy: domain management; Apple and Google: mobile app distribution. When you use receipt scanning, receipt images and relevant information are sent to Google Gemini to extract expense details. We do not currently use Gemini for other AI features. Providers may process information overseas under their own policies.
6. Who owns my business information?
You retain your rights in the business information and customer records you enter into ZappInvoice. You authorise Hypermint Digital Pty Ltd to process and store this information as reasonably necessary to provide ZappInvoice's services, maintain security and comply with applicable laws.
7. What happens when I cancel my ZappInvoice account?
When your subscription ends, your account enters read-only mode for 30 calendar days. During that period you may log in and view existing records, but cannot create or modify invoices, quotes, expenses or transactions. You must email ZappInvoice to request a data export. After 30 days, account access ends and data becomes eligible for deletion, subject to legal retention requirements and backups.
8. How do I retrieve my information?
Email hello@zappinvoice.com within 30 calendar days after your subscription ends to request an export of your available business information. Self-service export is not currently available. We may verify your identity and will process requests within a reasonable timeframe. You are responsible for requesting and retaining your records before the deadline. Permanently deleted information may not be recoverable.
9. Does ZappInvoice maintain backups?
Hostinger provides VPS backups and snapshots for disaster recovery. Backup schedules and retention depend on the hosting configuration and may include daily and weekly cycles. Deleted information may remain in backup copies until those backups expire. Backups are not a customer-accessible archive. MongoDB Atlas backup arrangements may differ.
10. Is ZappInvoice responsible for my ATO record-keeping obligations?
No. ZappInvoice is an invoicing, payment and business administration platform, not an accounting or tax advisory service. The ATO generally requires most business tax records to be kept for at least five years, although longer periods may apply. You are responsible for retaining records required by Australian law.
11. Can I access, correct or request deletion of my personal information?
Yes. Contact hello@zappinvoice.com to request access, correction or deletion, subject to applicable legal requirements and exceptions.
12. How do I raise a privacy concern?
Contact Hypermint Digital Pty Ltd, trading as ZappInvoice, Australia, at hello@zappinvoice.com. We will review enquiries and respond within a reasonable timeframe. Where applicable, you may also contact the Office of the Australian Information Commissioner (OAIC).
13. Can this policy change?
We may update this policy to reflect changes in our services, technology or legal obligations. The latest version will be available on our website and app. Nothing in this policy excludes rights or protections that cannot legally be excluded under Australian law.