What the workspace can contain
Business and client details, invoices, agreement text, employee profiles, salary calculations, payment records, logos and PDF templates. Enter only information you are authorized to handle.
Local mode
Structured records are saved in this browser’s local storage. Uploaded PDF templates are saved in this browser’s IndexedDB file storage. They are not uploaded to an InvoiceFlow database or published on this website. Other people using the same browser profile may be able to open them.
Optional Google Drive mode
When Google Drive is configured and you choose to connect, Google asks you to select an account and authorize access to files created or opened with InvoiceFlow. The app loads your saved history from that account and sends new workspace snapshots and uploaded template files directly from your browser to your own Drive.
In Drive mode, the loaded workspace and Google access token remain in this tab’s memory. The app does not write that Drive workspace to this browser’s local workspace or keep access tokens in local storage. Your pre-existing local workspace remains separate. On a first connection, local records are copied to Drive only after you choose to copy them.
What is kept in Drive
Each successful history save creates a dated JSON snapshot in your private InvoiceFlow Workspace folder. Original PDF templates and filled PDFs saved using the Drive action are also kept there. When you select an existing Drive PDF, the app imports a private copy into its workspace. Google Docs files are exported to PDF copies. The source document is not edited. InvoiceFlow JSON backups are validated before a confirmation to replace the current workspace. The app does not make the folder public or share files with anyone. Older snapshots remain until you remove them in Drive; your Google storage allowance applies. The dashboard rebuilds from the latest snapshot when you reconnect.
Unsaved changes and Google sessions
Drive access can expire or network requests can fail. An unsaved / reconnect message is shown instead of a successful-save message. Keep the tab open, reconnect the same account, or download a backup. Moving between this website’s pages and the workspace in the same tab keeps the active Google connection and workspace in memory. Closing or reloading the tab requires reconnecting to Google; doing so before a Drive save can lose unsaved changes.
Hosting and third parties
Your hosting provider receives ordinary website requests and may keep operational logs. When Google Drive support is configured, the workspace loads Google’s account access library and uses Google APIs for the connection you authorize. Opening existing files loads Google Picker in a Google-hosted dialog. It lets you browse your Drive and choose specific supported files for the app to access. This edition includes no advertising or analytics scripts.
Optional AI recognition
Choosing a recognition option does not upload immediately. After you explicitly agree, an image of the selected original PDF page is sent through this website to an external AI recognition service. Visible names, amounts and other details on that page are included. Other pages and your original PDF file are not submitted. The app relays the image and recognition result in memory, does not write them to a server database and does not deliberately log their contents. Hosting infrastructure may keep request metadata. The recognition service processes submitted information under its own policies; the website does not promise that the provider deletes or never retains it. Closing the dialog stops waiting but does not cancel an already submitted provider job.
Review text before adding fields. Only text fields and logo or image selections you choose are saved with the template in your current local or Drive workspace; the full recognition response is not automatically saved. Downloaded transcripts are private files on your device. AI scanning requires the owner’s provider connection and is subject to external service limits. Scanning guide and limits →
Downloads and deletion
Backups, CSV exports, payslips and PDFs can contain personal information. Keep them private. Delete all local data clears this site’s local records and private PDF storage in the current browser. Disconnecting Drive clears the loaded Drive workspace from the tab; it does not delete your Drive history. Remove the corresponding files in your own Drive to delete that history. Previously downloaded files are not removed by either action.
PDF templates and email drafts
The PDF tool fills supported form fields, adds text to blank areas and lets you select existing printed text for replacement. Replacement exports rebuild the pages as images after covering the chosen areas and add editable replacement fields. Other source content becomes part of the page image. Match the background and review the result, especially near lines, graphics or adjacent text. Scanned pages can use manually placed replacement areas or optional AI recognition. AI results require review before use. A replacement logo covers the marked area and places the chosen image over it. Source content can remain beneath the cover, so this is not a secure redaction tool. Original PDFs remain private and unchanged. Email actions open your own email application; InvoiceFlow does not send mail for you.
Shared devices
Local mode has no password or application-level encryption. Disconnect Drive and close the tab when finished on a shared device. Do not enter passwords or payment-card details.
Open Drive & history →