The claim, exactly
What you type into an invoice, a quote or a calculator is not sent to InvoiceTools.com or to anyone else. There is no upload step, no server that processes it and no database that stores it. The PDF is drawn on your device. Some tools keep a draft on your device so a refresh does not lose your work, and that draft is never sent to us.
That holds without an account. Four things do send data, and they are listed below rather than left for you to find.
How the pages are built
Every tool is a static HTML page with its own JavaScript. When you open the invoice generator, your browser downloads that page once, then everything that follows happens in memory on your machine.
- Line items, totals and tax are calculated by the script on the page. No request is made to work out a number.
- The PDF is rendered by your browser from the document you can see. It is not generated on a server and downloaded.
- Your logo is read from your disk into the page. It is not uploaded. If you add a logo and then check the network tab, you will see no request carrying it.
- Client names, addresses and bank details live in the fields you typed them into. They are not written to a cookie or to our database. The invoice generator and the six file-format template pages keep a draft in your browser's local storage, on your own device, so you can recover it after a refresh. Clear it with Clear in the invoice generator or from your browser's site data.
Check it yourself
You do not have to take this on trust. The check takes about two minutes and uses tools built into Chrome, Firefox, Safari and Edge.
- Open the invoice generator.
- Open developer tools. On Windows or Linux press F12. On a Mac press Cmd, Option and I together.
- Choose the Network tab. Tick Fetch/XHR so page assets are hidden and only data requests show.
- Fill in the invoice. Add a client, several line items, a tax rate and a logo. Export the PDF.
- Watch the list. Nothing you typed appears in any request, because no request carrying it is made.
You will see one request that is not yours: a page-view ping to Google Analytics when the page loads. It records the page, your country and your device type. It carries nothing from the form because it fires before you have typed anything, and it does not fire again while you work.
What does leave, and when
Four features send data, and all four are things you choose.
If you create an account
An account exists so your business details, clients and invoices are still there tomorrow. That means storing them. The privacy page lists exactly what is kept and why. Card numbers and bank credentials are never stored; payments go through a payment provider and only a reference is held.
If you send a tracked link
A tracked link is a copy of one document stored on our server so your client can open it without an account. It records when it was opened and what the client did with it. It exists only if you create it, and it is deleted with the document.
If you use the AI helper
Typing a description and asking the page to draft the invoice sends that description to a server so it can be turned into line items. It is sent when you press the button, not before, and it is the description, not the finished document. The draft that comes back is cached on our server for up to 30 days. The privacy page has the details.
If you take payments with Pay now
Pay now sends the person paying to a checkout page run by Stripe, where they pay by card or bank. Their card or bank details go to Stripe, not to InvoiceTools.com. We keep the payment reference, the amount and the status so the invoice can show as paid. It exists only if you turn on online payments for your account and share a pay link.
Sending an invoice by email or WhatsApp from the page hands the document to your own mail or messaging app. It does not route through InvoiceTools.com.
Why it is built this way
Most free invoice tools are a funnel: you type your client's details into their form, and now their server has your client list. Building the tools so the data stays on your device removes the question. It also means there is no copy on our side to breach, sell or subpoena unless you choose to save one.
The trade-off is real. Without an account, nothing is saved on our side, and a local draft lives only in one browser on one device. The account is there for anyone who wants their documents on every device.
One thing to know about the analytics
The site currently uses Google Analytics to count page views. It sets a cookie so repeat visits are counted once. It is loaded on the page, not inside the tools, and it never receives the content of a document. If that still matters to you, a content blocker removes it and every tool keeps working.