InvoiceZip

Privacy

InvoiceZip is designed so your Stripe restricted key and invoice PDFs never become our data.

  • Key in memory only. Your restricted API key is used for a single export job, held in RAM for that request, and cleared when the response finishes. We do not write keys to disk, a database, cookies, localStorage, logs, or email.
  • No PDF store. Invoice/receipt bytes are fetched into a ZIP in memory (or ephemeral temp deleted before the response ends). There is no permanent PDF archive, key vault, or cron job that re-reads your account.
  • Restricted keys only. We accept only keys starting with rk_test_ or rk_live_. Secret keys (sk_) and publishable keys are rejected. We never call Stripe write endpoints to move money.
  • Not a Stripe partner. InvoiceZip is an independent export tool. Prefer a tightly scoped restricted key with Charges / PaymentIntents / Transfers write set to None.
  • No Plaid / bank login. We do not collect bank credentials or connect to payout rails.
  • Minimal analytics (if any). Product telemetry must never include API keys, invoice contents, customer names, emails, or amounts.

Questions: open an issue on the project repository.