Who we are
Deline is operated by N.I. Bloom Investments Ltd, a company registered in Cyprus (Reg. no. HE 460140, VAT CY60073409S). Our business address is Kosta Hadjikakou 10, Atlantis Building 401, Larnaca, Cyprus. Contact support@deline.io for support or privacy requests.
This policy explains how we handle information when you visit deline.io, use app.deline.io, receive a document through the service, or contact us. A business using Deline chooses what customer and transaction information to enter and who may access or receive it. That business is responsible for its own customer notices and instructions; this policy does not replace them.
Information we receive
Account information includes your name, email address, email verification, password hash, workspace memberships and invitations. Session and security records may include an IP address, browser information, dates and activity associated with an account.
Workspace information includes business and customer contact and billing details, invoice and quote contents, amounts, currencies, business-supplied taxes and exchange rates, manually recorded payments, credit notes, catalogue entries, branding, uploaded files, generated PDFs and activity history. It is supplied by the business and its authorised users; a customer’s details may reach us through that business.
When you use Pip, we receive your messages and store the conversation and proposed actions. When you contact support, we receive your email address, message and information you choose to include. Transactional email records include sender and recipient details, subject, delivery status and, while needed for sending or troubleshooting, message contents.
Website and application requests also provide connection information to our hosting and security infrastructure. Account and transaction details needed for a requested feature are necessary to provide that feature. You can browse the public website without an account, and use ordinary invoicing tools without using Pip.
How we use information
We use information to create and secure accounts, check workspace permissions, provide the features you request, prepare and preserve business documents, deliver requested messages, answer support requests, investigate errors and abuse, and maintain and recover the service. We use Pip messages and permitted workspace details to answer your request and prepare an action for your review.
Where applicable data-protection law requires a legal basis, our grounds depend on the purpose: performing our agreement for account and service delivery; our legitimate interests in operating a secure service, preventing misuse and answering business enquiries; compliance with applicable legal obligations; and consent where it is required for an optional activity. Businesses using the service are responsible for the grounds and permissions for the customer records they supply.
We do not sell personal information or share it for cross-context behavioural advertising. The current public website does not use advertising trackers or an analytics script. We do not use your invoice contents or Pip conversations to target advertising.
Who receives information
Authorised members of your business can access information permitted by their role. Invoice recipients receive the document you send. Anyone holding an active customer invoice link can view that invoice and its PDF, so the link can be forwarded. Private attachments are not included in that public link.
Cloudflare provides our website and application hosting, database infrastructure and transactional email service. Anthropic processes information needed for Pip when you use it. Email service providers process messages sent to or from support. These providers receive the information needed for their respective services; their handling is also governed by the applicable provider terms and notices.
We may disclose information when reasonably necessary to comply with law or a valid legal request, protect people and the service from fraud or harm, establish or defend legal claims, or support a genuine company transaction such as a merger or acquisition, subject to applicable safeguards. We do not publish your private workspace records as marketing examples.
Pip and AI processing
Pip sends your current message, limited earlier conversation context, and relevant information returned by its permitted workspace tools to Anthropic. This may include customer contact information, invoice descriptions, dates, amounts and balances. The request may also be processed to count tokens and manage usage.
The tools do not retrieve PDF contents, attachment contents, passwords, connection credentials or customer-link tokens for Pip. Information you type into a message yourself is part of that message, so do not paste secrets or unrelated sensitive records. Anthropic’s own retention and processing depend on the applicable account terms and settings; we do not promise zero provider retention.
Pip is optional. It can propose certain record creations, but a separate confirmation is required before they are saved. It cannot issue or send an invoice, make a payment, or decide the tax treatment of a transaction. You remain responsible for reviewing its suggestions.
Stripe subscription billing
When a business owner chooses Basic, Deline uses Stripe to process the software subscription and provide hosted checkout and billing management. We send the owner’s name, email address and a business workspace identifier to Stripe to create a billing customer. Payment details are entered on Stripe’s hosted pages, not into Deline.
We retain Stripe customer and subscription identifiers, selected plan, payment and subscription status, billing period, cancellation status and webhook event identifiers to provide paid access, manage billing and resolve errors. Stripe receives the payment and billing details you supply, and processes them under its privacy policy linked below. We do not store full card numbers or card security codes.
This billing relationship concerns your Deline subscription. Plaid bank data and your customers’ invoice amounts are not sent to Stripe for subscription billing. Stripe billing records and our necessary subscription records follow the retention and privacy-request processes described in this policy.
Historical quote approval records
Some businesses previously sent quote approval requests through Deline. We retain existing recipient email addresses, the exact quote and revision, request and response times, any name entered by a respondent, the recorded decision, disclosure version and delivery records where needed for document history and the retention purposes described below.
New quote approval requests and responses through quote approval links are no longer available. Retained records remain subject to workspace permissions and the privacy-request process. Old quote approval links no longer provide access to the document or accept responses.
A previously recorded bank-payment preference or quote response did not authorize a debit, create a transfer or reserve funds. Removing this feature does not erase issued quotes or the associated history; these records follow the retention practices described below.
Recipient invoice review
A sending business can issue an invoice and request a review through an expiring email link. We retain the recipient address, immutable invoice revision, review instructions, deadlines, request and response times, decision, and delivery or reminder records. These support the requested review and document history.
Anyone holding an active review link can view the invoice and respond, so recipients should not forward it to unauthorised people. The response records use of the link, not an independent identity verification. Pending links can be revoked; expired or obsolete links cannot approve another invoice revision. Recipient review does not authorize or initiate a transfer.
Online invoice payments
A business can connect its own Stripe account so its customers can pay invoices by card. Deline asks Stripe to create that account and sends Stripe the business’s country and an internal workspace identifier; Stripe collects the identity and bank details it needs directly from the business. When a customer pays, Deline sends Stripe the invoice number, amount and currency, and the customer enters card details on Stripe’s own page; we do not receive card numbers. We keep the Stripe account and payment identifiers and the payment, refund and dispute status needed to record the payment on the invoice. Online bank payments are not available, and connecting a Plaid bank feed does not initiate transfers or pay invoices.
Customer invoice links show the invoice, original PDF and current recorded balance. The link does not expose internal payment references or workspace activity. Anyone holding an active link can view the supported document; the business can revoke access.
The business issuing an invoice remains your contact for its sale, receiving instructions, payment records and refunds. A credit note or refund-due figure does not itself move money. Existing invoice and payment records are retained under the record-retention practices described in this policy.
Plaid bank connections
Where bank connections are enabled, Deline uses Plaid Inc. to connect financial accounts you choose. The connection flow explains the data and purpose before you continue. By choosing “Agree & connect” and completing the Plaid flow, you authorize Plaid to access, process and transmit information from your selected financial accounts to Deline for the bank-account features described here. Ordinary invoicing does not require a bank connection. Sandbox environments use test accounts and sample data.
Deline receives account identifiers, names, types and masked account numbers; balances and their currencies; transaction identifiers, dates, descriptions, merchant names, amounts, currencies and pending status; and connection, consent and update information. We use these to display accounts and activity, keep the feed updated, resolve connection problems and let an authorized business member review and match an incoming payment to an invoice. We do not request account and routing numbers through Plaid Auth for this bank-feed feature.
Plaid processes information under its own End User Privacy Policy, linked below. That policy describes Plaid’s collection, use, sharing and retention and how to exercise rights with Plaid. Bank sign-in details are entered with Plaid or your bank, not into Deline. We store the provider access tokens needed to maintain a connection in encrypted form, separately from browser-visible data. We also record the notice version, user, business and time of consent.
The bank records are available to members of your business according to their permissions. Cloudflare hosts and processes these records for Deline. Pip has no tool access to bank balances, feeds or bank connection credentials in this release; information you choose to include in a Pip message is still handled as described in the AI section above.
Updates can continue while your connection is active, until it is disconnected, revoked or expires. The business owner can withdraw the connection through Bank accounts → Manage connections → Disconnect. We request removal of the Plaid Item and remove its stored access token, account balances and imported transaction feed after disconnection succeeds. A failed removal is shown as pending or needing attention and is retried; it is not shown as a completed removal.
Invoice payments already confirmed by the business are retained as transaction records, with limited matching references to explain them and prevent duplicates. Bank disconnection does not reverse these payments. These records, necessary security history and backup copies follow the retention rules below. To request deletion or close an account, contact support@deline.io so we can verify authority, disconnect remaining bank connections and explain any records that must be retained. Plaid’s own copies and connections are governed by its policy; you can manage applicable Plaid connections or make a request through Plaid Portal.
Bank data access does not authorize money movement. Matching a transaction records a payment that has already occurred; it does not initiate a transfer. Connecting a bank does not automatically mark an invoice paid.
How long we keep information
We keep information only as long as it is needed for the purposes below. The periods are maximums. A longer period applies only where the law requires it, while a dispute or claim is unresolved, or under a legal hold, and only for the records affected.
Account, workspace, customer, catalogue, invoice, quote, credit-note and payment records are kept while the account or workspace is open. Issued records are preserved against ordinary editing. Businesses remain responsible for keeping their own records for their tax and legal obligations, typically at least 7 years, and should download PDFs and exports before closing an account.
After a verified business-closure request and an opportunity to export records, the business becomes read-only during a 30-day cancellation period. Closure and deletion then remove its records within 90 days of the request, unless a legal hold or a written request for longer retention applies. Once closure is complete, we retain only the closed business name and opaque deletion-marker identifiers needed to prevent its records returning after a restore. The closed business’s accounting records, files, provider tokens, activity and subscription records are deleted, rather than de-identified and kept. Business closure does not delete a person’s separate sign-in account, which may serve other businesses; account deletion is a separate request.
Deline’s own subscription billing, payment, refund and tax records, and signup terms/privacy acceptance records, otherwise have a maximum retention period of 7 years after the end of the year of the transaction or account closure. For a closed business, the business-closure rule above supersedes that general schedule: we do not retain its subscription records by default. Where a specific legal hold or written retention request prevents deletion, we explain the affected records and scope rather than treating every closed business as subject to blanket retention.
When a bank is disconnected, updates stop, Plaid is asked to remove the connection, and the stored accounts and transactions for that connection are deleted once removal completes. Payments already matched to an invoice remain as invoice payment records while the business remains open. Provider-held copies follow the provider’s own policy.
Pip action previews expire after 15 minutes. Conversations stop accepting turns after 24 hours or the conversation limit; expired conversations and actions are removed when a new conversation starts, rather than at an exact 24-hour deletion deadline. Records you create through Pip remain ordinary workspace records.
Transactional email message bodies are cleared after accepted sending. Captured, failed or uncertain message bodies older than seven days are cleared when the email processor runs; delivery metadata remains for the delivery history and troubleshooting. These rules do not delete the invoice itself or copies in a recipient’s inbox.
Support correspondence is kept up to 3 years after the request is resolved. Security and sign-in logs are kept up to 12 months, or longer only while investigating a specific incident. The verified business-closure rule applies to copies of the closed business’s information in logs and search records as well.
Encrypted backups are rolling copies, each kept no longer than 13 months. Deleted data may remain in a backup until that copy expires. Backups are used only to recover the service, and earlier deletions are reapplied after any restore before the restored records are made available. Deleting active records does not instantly erase every backup or provider-held copy. Contact support@deline.io about a particular record.
Your choices and privacy requests
Email support@deline.io with the subject “Privacy request” to request access, correction, a copy, deletion, restriction or other applicable privacy rights. Depending on the law that applies, you may also object to certain processing, withdraw consent for a consent-based activity, or complain to your relevant data-protection authority. Withdrawing consent does not change processing that was lawful beforehand.
Tell us which account or business and type of request are involved. Do not send passwords, full bank credentials, payment-card details or identity documents in your first message. We may ask for proportionate information to verify identity and authority before disclosing or changing records, and will handle requests within the periods required by applicable law.
If a Deline business holds your details as its customer, contact that business first for requests about its invoices and records. You can also contact us, and we can help identify the appropriate route. A business may need to retain a transaction record even when a contact detail is corrected elsewhere.
The application supports PDF downloads and an invoice-summary CSV. These are not a complete account-data export. For account or business closure and deletion, contact support@deline.io. Where the owner closure workflow is enabled, a business owner may also use that workflow after exporting records; availability is shown in the workspace. Where information must be retained, we will explain the applicable reason and scope.
Children and policy updates
Deline is a business service and is not directed to children under 18. Do not create an account for a child or submit a child’s information unless necessary and lawfully authorised for a business record. Contact us if you believe a child has provided information improperly.
We will update this policy as the service or its data handling changes and show the effective date here. For material changes, we will provide an appropriate notice, such as an account notice or email, and obtain consent where required before a new use begins.