Please note. This is a template. It has not been reviewed by a lawyer and it is not legal advice. Replace every bracketed placeholder and have it checked before you publish it.
The short version
Everything you type into a document stays in your browser. It is never sent to us, because there is nothing to send it to. We hold no record of any invoice, quote or receipt you make here.
Who is responsible
[Your business name] of [registered address] is the data controller for this site. Contact [hello@opsliy.com].
What happens to your documents
The generators run entirely in your browser. Client names, addresses, prices, notes and any logo you add exist only in the page while the tab is open.
- Nothing is uploaded.
- Nothing is stored on a server.
- Nothing is retained after you close the tab.
When you choose Save as file, the browser writes a file to a location you pick on your own device. That file never passes through us. When you choose Print or save PDF, the PDF is produced by your own browser.
What the site does receive
Being on the internet at all involves some data, and it would be dishonest to claim otherwise:
- Server logs. Our host, [hosting provider], records the usual request information: IP address, time, page requested, browser user agent. This is used to keep the site running and secure. Retention is [retention period].
- Fonts. The site loads its typefaces from [font provider]. That request discloses your IP address to them. If you would rather it did not, a browser extension that blocks third party requests will stop it, and the site will fall back to your system fonts and work normally.
There is no product analytics, no advertising network, no tracking pixel, and no profiling.
Cookies
None are set by this site. See the cookies page for the detail.
Analytics
The site uses Google Analytics to count visits and see which pages are read. It is loaded on every page, but with storage denied by default, so until you accept it in the bar at the foot of the page Google receives a page view with no identifier and writes nothing to your device.
If you accept, two cookies are set and the same page views carry an identifier that distinguishes one returning browser from another. What Google receives either way is the page address, the referring page, approximate location derived from IP address, and browser and device type. It never receives anything you type into a document, because that data never leaves the page.
Google acts as our processor for this and may handle the data outside your country. Their own terms govern what else they do with it. You can withdraw consent at any time by clearing this site’s data in your browser, which removes the stored choice and the cookies with it.
The lawful basis for the cookies is your consent. The basis for the identifier-free measurement that happens before you choose is legitimate interest, since it records no one in particular.
What we do not do
- We do not sell personal data.
- We do not advertise, retarget, or run an advertising network’s tag.
- We do not build profiles of individual visitors, and Analytics is configured without advertising or personalisation storage.
- We do not use your documents to train anything, and could not: we never receive them.
Why we are allowed to process what little there is
Where a data protection law requires a lawful basis, ours is legitimate interest: keeping the site available, secure and working. We do not process personal data for marketing, profiling or advertising, because we do not do any of those things.
Where the data sits
The site is served by [hosting provider], whose servers are in [hosting region]. If you are in a country whose law restricts transfers abroad, that request and the log entry it produces may be handled outside it. There is nothing else to transfer, since the documents you make never leave your device.
Your rights
Under [applicable data protection law] you have rights of access, rectification, erasure, restriction, portability and objection in relation to personal data we hold about you. In practice that is limited to server logs. To exercise any of them, write to [hello@opsliy.com]. You may also complain to [supervisory authority].
Children
The site is not aimed at children and does not knowingly collect anything from them.
Changes
Any change appears on this page with a new date above. Material changes will be summarised in the release notes.