Privacy Policy

Effective 2 November 2026

This policy explains what data LI1P (“LI1P”, “we”) collects when you use the LI1P app at li1p.com, why, where it is kept, who it is shared with, and the choices you have. It includes a dedicated section on Google user data for people who connect a Gmail account.

Who we are

LI1P is operated by Agita Meldere, Ballyla, Castlebridge, Co. Wexford, Y35 XR98, Ireland, who is the controller of the personal data described here. Contact: support@cnct2soft.com.

What we collect

Your account

Your email address and a password (stored only as a secure hash by our authentication provider), your name if you give it, your language and display settings.

Your business records

What you enter to run your business: your business details, customers and their addresses and contact details, sites, visits and schedules, services and prices, invoices, payments, expenses and the receipt images you choose to upload, notes and reminders. You decide what goes in; we use it only to provide the app to you.

Device and usage data

If you turn on phone reminders, a push subscription for your device. Our hosting providers keep standard technical logs (such as IP address, browser type and time of request) for security and troubleshooting. We do not use advertising or analytics trackers.

Receipt reading

When you add a receipt, the text on it is read on your own device. The image is not sent to any third-party reading service.

Google user data (Gmail)

Connecting Gmail is optional, and only a business's owner can connect or disconnect it. If you connect it in Settings › Account › Invoice sending account, Google asks you to allow LI1P to:

• Send email on your behalf (https://www.googleapis.com/auth/gmail.send), and
• See your primary Google Account email address (openid and userinfo.email).

How we access and use it

• We use the send permission only to send an invoice email that has been reviewed and confirmed in LI1P by you or by a member of your business, from your connected Gmail address to the recipient chosen at that send, with the invoice PDF attached. Nothing is sent automatically or in the background.
• We use your email address only to check that it matches the address you entered, to show which mailbox LI1P sends from, as the sender of the invoice emails you send, to suggest that account on Google's sign-in screen when you connect again, and, when you disconnect, to check whether the same Gmail account is still connected to another LI1P business.
• LI1P cannot read, search, modify or delete any email, label, contact or other content in your Gmail account. We do not request any permission that would allow it.
• LI1P does not create aggregated or anonymised data from Google user data.

How we store it

• When you connect, Google gives LI1P a refresh token, a short-lived access token and an ID token. LI1P stores only the refresh token, in a separate database table that no browser, including yours, can read. Only LI1P's server functions can use it: to obtain a new short-lived access token each time an invoice is sent, and to ask Google to revoke it when you disconnect. LI1P uses the ID token only while you connect, to verify your Google email address. Access tokens and the ID token are held in memory only during the server request in which they are returned or used, and are not stored.
• The database is hosted by Supabase in the European Union (Ireland) and is encrypted at rest.
• For each attempt to send an invoice, including attempts that fail, LI1P keeps a record in your business's books: the recipient address, the subject and text of the message, the time, the result and, when Gmail returns one, Gmail's message ID. A copy of the sent message also appears in your own Gmail “Sent” folder, as with any email you send.
• When connecting, sending or disconnecting Gmail fails, LI1P's server logs may keep the error details returned by Google, our database or the hosting service. Depending on the failure, these can include the connected Gmail address, a Google token or Gmail's message ID. We use these logs only for security and troubleshooting, and our hosting provider keeps them for a limited time.

How long we keep it, and how to remove it

• When a business owner's Disconnect request in Settings › Account › Invoice sending account completes successfully, LI1P deletes that business's stored refresh token. LI1P then also asks Google to revoke it, unless the same Gmail account is still connected to another LI1P business; if that request cannot be completed, the token is still deleted from LI1P.
• If you withdraw access from your Google Account instead, the stored token stops working at once. LI1P deletes it the next time it tries to use it, or when a Disconnect request completes.
• The connected Gmail address and the connection's status stay in your business's connection history, also after a disconnect, until the business is deleted.
• You can withdraw LI1P's access at any time from your Google Account at myaccount.google.com/permissions.
• Records of invoices you sent are part of your business's books and are kept with them; see Retention.

Sharing

We do not sell Google user data, use it for advertising, or use it to develop, improve or train artificial intelligence or machine-learning models. Within LI1P, your connected Gmail address and your business's records of invoice emails are available to the members of your business. The address also appears as the sender of the invoice emails you choose to send, so their recipients see it, as with any email. Tokens are never shown to members of your business or to recipients; only LI1P's server functions at Supabase and Google process them. Apart from that, we share Google user data only with the service providers listed below that process it on our behalf, or where required by law. No person at LI1P reads it, unless you ask us to for support, it is needed for security or to comply with the law.

Why we use your data (legal bases)

• To provide the app you signed up for (contract): your account, your business records, sending the invoices you ask us to send, reminders you turn on.
• To keep the service secure and working (legitimate interests): technical logs, preventing abuse, fixing faults.
• To meet legal obligations, where they apply.

The customer details you enter are your own business records. For those, you are the controller and LI1P processes them on your behalf to provide the app.

Who we share data with

We use these service providers to run LI1P. They process data only on our instructions:

• Supabase — database, sign-in and file storage (EU, Ireland).
• Netlify — hosting of the li1p.com website and app files.
• Resend — delivery of account emails such as invitations and password resets.
• Google — only if you connect Gmail, to send the invoices you choose to send.
• Your device's push service (Apple, Google or Mozilla, depending on your browser) — only if you turn on phone reminders, to deliver them.

Some of these providers may process data outside the European Economic Area. Where they do, they rely on safeguards recognised under EU law, such as the European Commission's standard contractual clauses or adequacy decisions.

We do not sell personal data and do not share it for advertising.

Retention

Your account and business records are kept for as long as your account exists, because invoices and payments are financial records you may need to keep. Receipt images you upload are not deleted automatically at present: they stay in storage even if you remove them from an expense, delete the expense or delete your business in the app. When you ask us to delete your data, we delete all of them, including those. Gmail tokens are deleted as described above.

Your rights

You can access and correct most of your data directly in the app. You can also ask us to give you a copy of your data, correct it, delete it, restrict or object to its use. Deleting your account is not yet available inside the app. To delete it, email support@cnct2soft.com from your account's address. We then delete your account and profile, every business you own in LI1P with all of its records, every receipt image you uploaded (including any you had removed, and those of a business you had already deleted), and your Gmail connection, which we also ask Google to revoke. Export anything you need first: keeping your own business records is your responsibility (see our Terms). We keep only a record that the deletion was done, without its content. Copies in our backups are removed when those backups are replaced; if we ever have to restore one, we delete your data from it again first. We reply to requests within one month. You also have the right to complain to the Irish Data Protection Commission (dataprotection.ie) or your local supervisory authority.

Security

Each business's records are isolated in the database so that no other business can reach them. Connections use HTTPS. Gmail tokens are kept out of reach of every browser, as described above. No system is perfectly secure, and we will tell you without undue delay if a breach affects your data.

Children

LI1P is a business tool and is not intended for anyone under 16.

Changes

If we change this policy, we will update the date above and, for significant changes, tell you in the app or by email before they take effect.