Get paid faster · Grow your SEO · Solo trades & teams

Legal

Privacy Policy

How Laraworks Commerce handles data for Skoosh and the free invoice generator.

Last updated: 20 August 2026

This Privacy Policy explains how Laraworks Commerce ("we", "us", "our") collects, uses, and protects personal data when you use Skoosh (the web application at skoosh.laraworks.com and related subdomains) and our Free Invoice Generator tool.

We are the data controller for personal data processed through Skoosh. If you have questions, contact us at [email protected].


1. What Skoosh is

Skoosh is software for trades and small businesses to:

  • Create and send invoices
  • Track jobs and clients
  • Automate payment follow-ups
  • Request and follow up on customer reviews
  • Accept card payments via Stripe Connect (on eligible plans)
  • Generate invoice PDFs, including via our standalone Free Invoice Generator

Some features depend on your subscription plan. Features described on our website may be added, changed, or limited over time.


2. Information we collect

2.1 Skoosh account holders

When you register and use Skoosh, we may collect and store:

  • Account details: name, email address, password (stored hashed), profile photo (optional), team/business name and business profile (address, phone, VAT number, logo, invoice terms, bank details you choose to store)
  • Authentication & security: login timestamps, session data (including IP address and browser user agent), two-factor authentication data, passkey/WebAuthn credentials if you enable them
  • Billing: Stripe customer ID, subscription status, plan, and payment history processed by Stripe (we do not store full card numbers)
  • Stripe Connect: if you connect Stripe to accept customer payments, we store your Connect account ID and onboarding status
  • Your business data: clients (name, email, phone, address), jobs (descriptions, dates, prices, photos/videos you upload), invoices (line items, amounts, dates, delivery and payment status), review request logs, and activity recorded on invoices
  • Communications: emails we send on your behalf to your clients (invoices, reminders, review requests) and emails we send to you (verification codes, account notices)
  • Feedback: if you cancel or close your account, we may store the reason and comments you provide voluntarily
  • Support & admin: if you contact us or if our staff access your account for support (including authorised super-admin impersonation for troubleshooting)

2.2 Free Invoice Generator (no account)

If you use the Free Invoice Generator without signing in:

  • In your browser only: your draft invoice, logo, and download history are saved in local storage on your device. We do not receive this data unless you submit it (see below).
  • When you download a PDF: you send the invoice content you entered (including optional logo as a data URL) to our server temporarily to generate the PDF. We do not keep a copy of your invoice on our servers after the PDF is generated.
  • When you leave a review: we store your name, email, rating, review text, submission time, a hashed version of your IP address, and a truncated browser user agent. Reviews are moderated before publication.
  • Security: we may use Cloudflare Turnstile and rate limits; we do not use the Turnstile response for profiling.

2.3 Customer portals

If you are a client of a Skoosh user and open a signed invoice or job-evidence link, we process only what is needed to show that page (for example invoice details or evidence files the business chose to share). We do not use this to market Skoosh to you directly.

2.4 Optional AI invoicing

If you use AI-assisted invoicing, the text or audio you submit is sent to Google’s Gemini API to generate a draft. Do not submit special-category or unnecessary personal data. Google’s terms and privacy policy apply to that processing.


3. How we use your information

We use personal data to:

  • Provide, maintain, and improve Skoosh and the Free Invoice Generator
  • Authenticate you and keep your account secure
  • Send transactional emails (invoices, reminders, verification codes, billing notices)
  • Process subscriptions and Connect payments through Stripe
  • Enforce plan limits, prevent abuse, and moderate public reviews
  • Comply with law and respond to lawful requests
  • Analyse aggregated, non-identifying usage to improve the product

We do not sell your personal data.


4. Legal bases (UK GDPR)

Where UK GDPR applies, we rely on:

  • Contract — to provide Skoosh and related services you sign up for
  • Legitimate interests — security, fraud prevention, moderation, improving the service, and business administration (balanced against your rights)
  • Consent — where required (for example optional marketing if we introduce it, or non-essential cookies if we use them)
  • Legal obligation — where we must retain or disclose data by law

For Free Invoice Generator reviews, we process your submission to display moderated feedback and to prevent spam.


5. Who we share data with

We use trusted processors and service providers, including:

Provider Purpose
Stripe Subscription billing and Connect customer payments
Cloudflare Turnstile Bot protection on registration, PDF downloads, and reviews
Email delivery (e.g. Amazon SES or similar) Sending transactional email
Google (Gemini) Optional AI invoice drafting
Hosting & infrastructure Running the application and storing uploaded files

We may disclose data if required by law, to protect rights and safety, or in connection with a business transfer. We require processors to protect data appropriately.

Your clients’ data: when you use Skoosh to email clients, you are responsible for having a lawful basis to contact them. You act as an independent controller (or processor, depending on context) for your clients’ personal data; Skoosh processes it on your instructions to deliver the service.


6. International transfers

Some providers (for example Stripe, Google, or Cloudflare) may process data outside the UK. Where required, we use appropriate safeguards such as standard contractual clauses or UK adequacy regulations.


7. Retention

  • Active accounts: we retain data while your account is active and as needed to provide the service.
  • Closed accounts: when you delete or close your account, we delete or anonymise personal data within a reasonable period, except where we must retain it for legal, tax, or dispute purposes. Leaving feedback may be retained in anonymised or aggregated form.
  • Inactivity: accounts with no login for an extended period may receive a warning email and may be deleted if still inactive (see our scheduled maintenance processes).
  • Archived invoices/jobs: items in trash may be permanently deleted after 30 days.
  • Free Invoice Generator PDFs: not retained on our servers after generation.
  • Moderated reviews: retained while published or until deleted by us or by admin action.
  • Logs & security: kept for a limited period appropriate to security and abuse prevention.

8. Security

We use technical and organisational measures appropriate to the service, including encryption in transit (HTTPS), hashed passwords, access controls, rate limiting, and moderation of public reviews. No method of transmission or storage is completely secure.


9. Your rights

If UK GDPR or similar law applies, you may have the right to:

  • Access, rectify, or erase your personal data
  • Restrict or object to certain processing
  • Data portability (where applicable)
  • Withdraw consent (where processing is based on consent)
  • Lodge a complaint with the ICO (ico.org.uk) or your local supervisory authority

To exercise rights, email [email protected]. We may need to verify your identity.

Account holders can update much of their data in Settings and delete their account from profile/billing options.


10. Cookies and similar technologies

We use:

  • Essential cookies/session storage — to keep you signed in and secure the application
  • Local storage (Free Invoice Generator) — to save drafts on your device only
  • PWA cache (Invoice Generator app) — to allow offline use when installed; cached content stays on your device

We do not describe a separate advertising cookie programme in this policy. If we add non-essential analytics or marketing cookies, we will update this policy and, where required, ask for consent.


11. Children

Skoosh is a business tool and is not directed at children under 16. We do not knowingly collect data from children.


12. Changes

We may update this Privacy Policy from time to time. We will post the new version on this page and update the “Last updated” date. Material changes may be notified by email or in-app notice where appropriate.


13. Contact

Laraworks Commerce (Skoosh)
Email: [email protected]