This Privacy & Data Protection notice explains how Standard (“we”, “our”, “us”) handles personal information when you use our billing and invoicing platform (the “Service”).
1 Information we collect
We may process the following categories of data:
- Account credentials you provide (phone number, email, name)
- Billing profile details and invoice metadata
- Technical logs including IP address, browser type, and session timestamps
- Support messages and communications you send through the Service
2 How we use your data
- To operate, maintain, and improve the Service
- To authenticate your account and prevent fraud or abuse
- To respond to support requests and communicate about the platform
- To comply with legal obligations and enforce our terms
3 Legal basis (GDPR)
Where EU/UK GDPR applies, we process data based on: contract performance, legitimate interests (security and product improvement), and consent where required — for example, non-essential cookies described in our Cookie Policy.
Have questions about how we handle your data?
Contact Support4 Data sharing
We do not sell your personal information. We may share data with infrastructure or communications providers who process it on our behalf, or when required by applicable law.
5 Data retention
We retain information only as long as necessary for the purposes described above, unless a longer retention period is required or permitted by law.
Active account data is retained for the duration of your subscription. After account closure, we may retain certain records for up to 24 months for legal and audit purposes.
Server and security logs are typically retained for 90 days unless needed for an ongoing investigation or legal requirement.
6 Your data rights
Depending on your region, you may have the following rights regarding your personal data:
Access
Request a copy of your personal data
Rectification
Correct inaccurate information
Erasure
Request deletion of your data
Restriction
Limit how we process data
Portability
Receive data in a portable format
Objection
Object to certain processing
7 Security measures
We implement appropriate technical and organisational safeguards including encryption in transit and at rest, access controls, and regular security reviews. No online service can guarantee absolute security.
8 International transfers
If data is processed across borders, we ensure appropriate safeguards are in place as required by applicable data protection laws.
9 Children
The Service is not directed at individuals under 16. We do not knowingly collect personal information from children.
10 Policy updates
We may update this notice and will revise the “Last updated” date. Continued use after changes constitutes acceptance where permitted by law.
11 Contact us
For privacy-related questions or to exercise your data rights, contact us through the channels listed on our website or in your account settings.