Privacy Policy

1. Introduction

1.1 Ace Services ("we," "us," or "our") values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and share information about you when you use the Ace Invoice App (the "App"). "Personal information" is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual.

1.2 This Privacy Policy applies to all users of the App.

2. Data Controller Details

2.1 Ace Services Global Ltd is the data controller responsible for your personal information. If you have any questions about this Privacy Policy, please contact us at: privacy@aceservices.app

3. How We Collect Personal Information

3.1 We collect personal information from various sources, including:

• Directly from you: When you create an account, create invoices, contact customer support, or otherwise interact with the App.
• Automatically: Through technologies that collect information about your device and usage of the App.
• From Stripe: Where you connect a Stripe account, we receive account status and capability information from Stripe.

3.2 We may be required by law to collect certain personal information. Failure to provide this information may prevent us from providing our services.

4. What We Collect

The categories of personal information we collect may include:

• Identity and Contact Information: Your name or business name, email address, and phone number.
• Communications: Messages, feedback, and other content you submit through the App.
• Usage Information: Device information, app interactions, and diagnostic/crash data used to keep the App working.
• Financial and Payment Data: Invoice records including job descriptions, line items, amounts, VAT, due dates, payment dates, and payment method (cash, card or bank transfer); Stripe Connect Account status and capability information; payment dispute records including dispute reason, status, and evidence deadlines. Where you enter details of your own customers into the App (name, mobile number, email address, job address), that data is stored by Ace on your instruction — see Section 6 for how this data is handled.

Ace Services never collects, stores, or has access to payment card numbers, bank account numbers, or other payment credentials — these are handled exclusively by Stripe.

5. How We Use Your Personal Information

We use your personal information for the following purposes:

• Providing and Improving the App: To enable you to create invoices, generate Stripe payment links, send payment notifications, track paid and unpaid jobs, and maintain a customer book for repeat invoicing. This includes processing webhook events from Stripe to update invoice status in real time.
• Communication: To send you important updates, notifications, and customer support messages.
• Security and Fraud Prevention: To protect against fraud, unauthorized access, and other illegal activities.
• Legal Compliance: To comply with applicable laws and regulations.

6. How We Share Your Personal Information

We may share your personal information with:

• Service Providers: With third-party service providers (such as Google Firebase, which provides our authentication, database, analytics and crash-reporting infrastructure) who assist us with operating the App, acting as data processors on our behalf.
• Stripe Technology Europe Ltd: When you use the payment features, we share your identity and account information with Stripe to create and manage your Stripe Connect Account. Stripe then receives payment transaction data directly from your customers. Stripe acts as an independent data controller for the data it processes and is subject to its own privacy policy, available at stripe.com/gb/privacy. Stripe is authorised by the FCA (FRN: 900461). Stripe may transfer data outside the UK, including to the United States; it does so under standard contractual clauses approved under UK GDPR, providing equivalent protections.
• Your customers' data: When you enter your own customers' personal data (name, mobile number, email address, job address) into the App, you are acting as the data controller for that data and Ace Services acts as a data processor on your instruction. You are responsible for ensuring you have a lawful basis to share your customers' data with Ace, and for making your customers aware of how their data is used in accordance with your own privacy obligations. Ace will only use this data to provide the invoicing feature to you and will not use it for any other purpose.
• Legal Authorities: When required by law or legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets.

7. Purpose and Lawful Basis for Processing

We process your personal information for purposes that are necessary for delivering and improving the App, meeting our legal obligations, and protecting our legitimate interests. Each purpose is supported by a lawful basis under the UK General Data Protection Regulation (UK GDPR). The main purposes and corresponding lawful bases include:

You have the right to object to or withdraw consent for certain types of processing at any time.

8. Data Security

We implement reasonable security measures to protect your personal information. However, no method of transmission over the internet or electronic storage is completely secure. Ace Services never stores, processes, or has access to payment card numbers, bank account details, or any other payment credentials. All such data is handled exclusively by Stripe under their PCI DSS compliance programme.

9. Data Retention

We keep personal information only for as long as necessary for the purposes described above:

• Active accounts: We retain your information while your account is open.
• Invoice and payment records: Retained for 6 years from the date of creation to meet HMRC requirements.
• Your customer book data: Retained while your account is active; deleted when you delete your account, save where we are legally required to keep invoice records.
• Stripe Connect Account data: Retained while the Stripe account is connected to Ace Invoice; subject to Stripe's own retention obligations after disconnection.
• Payment dispute records: Retained for the duration of the dispute plus 6 years to cover the applicable limitation period for financial claims.
• Fraud prevention: Key identifiers may be kept after account closure to prevent duplicate or banned accounts.
• When retention is no longer required, data is securely deleted or anonymised.

10. Marketing Choices

• Emails & SMS: You can manage preferences or opt out at any time via your account settings or the 'unsubscribe' link.
• Push notifications: Disable in your device settings or within the app.

11. Your Rights

You may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict the processing of your information. You can delete your account and associated personal data at any time from within the App. To exercise any other rights, please contact us using the contact information provided above.

12. Children

Ace Invoice is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us so we can delete it.

13. Third-Party Links

The App may contain links to third-party sites or apps (such as Stripe). We are not responsible for their privacy practices. Please review their privacy notices.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on the App or through other communication channels.

15. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@aceservices.app.