Dhi Invoice ("we", "us") provides invoicing software for Maldives businesses. This page explains what data we collect and how we use it.
What we collect
- Your name and business name
- Your email address
- Your mobile number (collected in your business profile, optional)
- The documents you create (invoices, quotations, receipts)
- Your customer names and contact details you enter into documents
- Payment receipts you upload for subscription activation
How we use it
We use your data only to operate Dhi Invoice — to render your documents, send transactional emails, send marketing emails to users who have signed up or shown interest, and respond to support requests. We never sell or share your business data with any third party.
Cookies
We use two types of cookies:
Essential cookies: Required to keep you signed in to your account. These cannot be disabled as the app will not function without them.
Marketing cookies: Used to send relevant marketing emails to users who have signed up or shown interest in Dhi Invoice. We do not use advertising or third-party tracking cookies.
When you first visit the site you will be asked to choose between accepting all cookies or essential cookies only. You can change your preference at any time by contacting us.
Storage & location
Your data is stored on Supabase infrastructure hosted in the Southeast Asia (Singapore) region. All data is encrypted at rest (AES-256) and in transit (TLS 1.2+). We do not store data on local servers in the Maldives. Your data is only accessible from your authenticated Dhi Invoice account.
Third-party processors
We use a small number of trusted service providers to operate Dhi Invoice. Each is bound by their own data-processing terms:
- Supabase (Singapore) — database, authentication and file storage.
- Cloudflare — CDN, edge hosting and DDoS protection.
- Resend — transactional and authentication email delivery.
- Google — optional "Sign in with Google" authentication and reCAPTCHA bot protection.
We never sell or share your business data with any third party for advertising or profiling purposes.
Data retention
We keep your data for as long as your account is active. If you request account deletion, all personal data and documents are permanently deleted within 30 days. Subscription payment records may be retained for up to 7 yearsfor accounting and tax compliance under Maldivian law.
Cookies & analytics
We use only essential first-party cookies to keep you signed in and remember your preferences. We do not use third-party advertising cookies, analytics trackers, or pixel tracking. A separate marketing-cookie preference applies only to opt-in email marketing for users who have signed up.
Your rights
You can at any time:
- Access & export — request a copy of your account data in a portable format (CSV/JSON).
- Correction — update your profile and business details directly in the app, or email us for help.
- Deletion — request permanent deletion of your account and data (see Terms for the process).
- Withdraw consent — opt out of marketing emails at any time using the unsubscribe link.
Send any request to support@dhiinvoice.com. We respond within 30 days.
Backups
Your data is automatically backed up by Supabase. In the event of a technical failure, data can be restored from the most recent backup point. We recommend downloading important invoices as PDFs regularly as an additional safeguard for your own records.
Changes to this policy
We will notify users by email of material changes at least 30 days before they take effect.
Contact
Questions? Email support@dhiinvoice.com.