Skip to content
InvoiceWise

Privacy

What we store, and why

This page describes exactly what the InvoiceWise website collects when you use it, including analytics and advertising. We keep it short because there is deliberately little to say.

Who is responsible

Sortx Software Ltd (company number 17132612) is the data controller for the information described here. Our registered office is Flat 9 Lowood House, Bewley Street, London, E1 0BT, England.

What the forms collect

The waitlist and design group forms are conversational and multi-step. Your email address is saved as soon as you give it, so an unfinished form still leaves your place. Everything after that is optional, and we store the answers you choose to give:

  • your email address (the only required field), plus optional name, company, website, role, company size, industry, first use case, current tools, biggest pain, urgency, budget band, how you heard about us, whether you want the design group, and any free-text answer you write. We do not ask about, or store, any interest in other Sortx products;
  • whether you gave marketing consent (unchecked by default), and whether you completed the form;
  • the date and time, your browser’s user agent string, and a hashed version of your IP address. We hash the IP with a salt and never store the raw address. The hash is stored on your lead record itself, for abuse prevention, and is kept for as long as we keep the lead;
  • a separate abuse-prevention log. When a submission passes our basic checks we add an entry to it, whether or not that creates a lead, and once a hashed IP address is already over the hourly limit we add nothing more for it. Each entry holds only the hashed IP address, which product the form was for, and the time; it carries no email address and is not linked to any lead record. We keep those entries for two days and then delete them;
  • a random continuation token and a short share code, stored on the record. The token is held in your browser for this visit so the later steps of the form can add to your own submission and nobody else’s. If an address already on our list is submitted again, we email a separate recovery link to that address. Opening it replaces earlier browser access to that submission, so someone who entered your address before you cannot read or change answers you save afterwards. Recovery links expire after 24 hours. Anyone you share your recovery link or current browser token with can access that submission;
  • campaign context: which page and form you used, any UTM parameters in the link you followed, the referring page, and a short referral code if you arrived from a link someone shared. We keep the first campaign and referral values in this site's session storage so they stay with the form as you browse; later page changes do not replace recorded values.

Why we collect it

We use your email to contact you about InvoiceWise: to tell you about early access if you joined the waitlist, or to involve you in the design group. Our lawful basis is your consent, given when you submit the form. The extra answers are used in aggregate to decide what we build first.

We use the hashed IP address and user agent to keep the forms free of spam and abuse. The hash stays on your lead record, for abuse prevention, for as long as we keep the lead, and we count the entries in the separate log to limit how many times one hashed IP address can start a form in an hour, whether or not it creates a new record. We send one confirmation when an address joins, and, when an address already on our list is submitted again, a link to continue an earlier submission. Every new form saves its own answers separately. We check a one-hour interval before sending another continue link, although simultaneous requests may send duplicates. Marketing consent is separate and unchecked by default; if you leave it unchecked we still email you about InvoiceWise, but not marketing. You can change that answer, or clear any answer you gave, through the continue link we email you.

Cookies, analytics and consent

Before you choose, we set no tracking or advertising cookies. A small consent banner asks whether you accept analytics and advertising. Your choice is stored in your browser’s localStorage under the key invoicewise-consent, not in a cookie.

Google Tag Manager, Google Analytics 4, Meta Pixel, Microsoft Clarity and Microsoft Advertising UET load only after you accept. If you reject non-essential, those tools stay off. We do not use a third-party form service, and we do not sell your information.

Measurement events are queued locally in the browser. No analytics or advertising tags load before you accept. Once you accept, configured tools can process those events to measure visits and conversions. You can change or withdraw your choice at any time with the Cookie choices link in the footer of every page, which reopens the banner.

Where it is stored

Leads are stored in a PocketBase database that we run ourselves. Confirmation and notification emails are sent through Purelymail, our email provider.

How long we keep it

We keep your email and submission while InvoiceWise is in planning and while you remain on the waitlist or in the design group. You can ask us to delete it at any time. The separate abuse-prevention log of hashed IP addresses is deleted after two days.

Your rights

You can ask to see, correct, or delete the information we hold about you, and you can withdraw your consent at any time. Email hello@invoicewise.uk and we will act on it. If you are not satisfied, you can complain to the Information Commissioner’s Office (ICO) in the UK.