Privacy policy

Last updated July 17, 2026

Who we are

Sablora ("we") is an invoicing service for small businesses, operated at sablora.com. Questions about this policy or your data: support@sablora.com.

What we collect

Account data — your email address and sign-in credentials (your password is stored only as a salted argon2id hash; we cannot read it back), plus the business profile you fill in: business name, address, tax ID, logo.

Data you enter — your customers (names, email addresses, billing addresses) and the invoices you create for them. You control this data; we store and process it only to provide the service.

Billing data — paid plans are processed by Stripe. We store your plan and a Stripe customer reference, never card numbers.

Security and usage data — sign-in events (IP address, browser user agent) used for account-security notices, monthly document counts used to enforce plan limits, and support-chat messages you send us.

Email we send on your behalf

When you send an invoice or receipt, Sablora emails it to the customer address you entered, on your behalf. Every such email identifies the sender, carries a working unsubscribe link and one-click unsubscribe headers, and replies go to your business email, not to us.

We record delivery failures: an address that hard-bounces, marks a message as spam, or unsubscribes is suppressed immediately and automatically — we refuse to email it again until you correct it.

Processors we rely on

Amazon Web Services (email delivery via SES, infrastructure), Stripe (payments). Each processes data only as needed to provide their function.

Cookies

We set only the cookies the app needs to work: a session cookie and a CSRF-protection cookie. No advertising or cross-site tracking.

Retention and deletion

Your data is kept while your account is active. Deleting your organization removes its customers, invoices and profile. To request access, export or deletion, email support@sablora.com.