Privacy Policy

This Privacy Policy explains how DMRUSH LIMITED ("we", "us", "our") collects, uses, and protects personal data when you use InvoiceRush at (the "Service").

We are the data controller for personal data processed through the Service. For data protection enquiries, contact support@dmrush.store.

DMRUSH LIMITED (company number SC876437), registered in Scotland, United Kingdom. Registered office: 1/4 22 Dundasvale Court, Glasgow, Scotland, G4 0XE.

Contact: support@dmrush.store

We may collect and process the following categories of data:

• Account data: name, email address, password hash, verification status, and marketing preferences.
• Business data: trading name, address, VAT number, bank details, logo, and other information you enter for documents.
• Client data: names, addresses, and contact details you store about your clients.
• Document data: invoices, quotes, line items, amounts, and related metadata.
• Billing data: subscription plan, billing interval, and payment status. Card details are processed by Mollie; we do not store full card numbers.
• Technical data: IP address, browser type, device information, and logs required for security and operation.
• Communications: messages you send via our contact form or support email.

We use personal data to:

• Provide, maintain, and improve the Service
• Create and deliver documents you request
• Process subscriptions and send service-related emails
• Respond to support requests
• Protect against fraud, abuse, and security incidents
• Comply with legal obligations

Our lawful bases under UK GDPR include contract performance, legitimate interests (such as security and product improvement), consent where required (for example, non-essential cookies or marketing where applicable), and legal obligation.

We share data only where necessary:

• Mollie: payment processing for paid subscriptions. Mollie processes payment details according to its own privacy policy.
• Infrastructure providers: hosting, email delivery, and monitoring services bound by contractual confidentiality and security obligations.
• Professional advisers: where required for legal, accounting, or compliance purposes.
• Authorities: when required by law or to protect rights and safety.

We do not sell your personal data.

We retain account and document data while your account is active and for a reasonable period afterwards to allow reactivation, resolve disputes, and meet legal requirements.

Billing records may be retained for the period required by tax and company law. When you request account closure, we delete or anonymise data where we no longer have a lawful basis to retain it, subject to legal exceptions.

Under UK data protection law, you may have the right to access, rectify, erase, restrict processing, object, and data portability, depending on the circumstances. You may also withdraw consent where processing is based on consent.

To exercise your rights, email support@dmrush.store. You may lodge a complaint with the Information Commissioner's Office (ICO) if you believe processing violates applicable law.

Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations or standard contractual clauses approved for international transfers.

We implement technical and organisational measures to protect personal data. See our Security page for an overview. No online service can guarantee absolute security.

We use cookies and similar technologies as described in our Cookie Policy.

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Material changes may be notified by email or through the Service.