Privacy Policy

1. Who We Are

Henri is operated by Spencer (sole proprietor, British Columbia, Canada). Contact: hello@gethenri.app

2. What We Collect

• Account information: name, email address
• Payment information: processed and stored by Stripe — we never see or store your full card details
• Invoice data: photos and PDFs you upload, and the line items extracted from them
• Usage data: basic analytics on how you use the service

3. Why We Collect It

• To provide and improve the Henri service
• To process payments
• To send transactional emails (confirmation, welcome, price alerts)
• To respond to support requests

4. How We Store It

Your data is stored securely using Supabase (PostgreSQL), hosted in North America. Invoice images are stored in encrypted cloud storage. We use industry-standard security practices including row-level security and encrypted connections.

5. Who We Share It With

We do not sell your personal information. We share data only with trusted service providers necessary to operate Henri:

• Stripe (payment processing)
• Supabase (database and storage)
• Resend (transactional email)
• Vercel (hosting)

All providers are contractually required to protect your data.

6. Your Rights Under PIPEDA

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Withdraw consent and request deletion of your data
• Know how your data is being used

To exercise any of these rights, email hello@gethenri.app. We will respond within 30 days.

7. Data Retention

We retain your data for as long as your account is active. If you cancel, we will delete your data within 90 days upon request.

8. Cookies

We use essential cookies to keep you logged in and maintain your session. See our Cookie Policy for details.

9. Changes to This Policy

We will notify you by email of any material changes to this policy.