Legal
Privacy policy
Sandglass is operated by Blue Nebula. This page says what is collected when you use it, why, and what you can do about it.
Last updated
What is collected
From you, when you use the product
- Account details: your email address and, if you sign in with Google or connect GitHub, the basic profile those services share.
- Business details: the name, email, address, logo and payment links you enter for your invoices.
- Your clients: names, email addresses, and any address or notes you add.
- Invoices: their contents, the PDFs made from them, and a log of the emails that sent them.
- Commit history: the commit information described on the security page, for the repositories and dates you choose.
- Notes and time-tracker exports you paste or upload to draft an invoice from. They are sent to the AI model for that draft and are not stored afterwards.
- Access tokens for services you connect, stored encrypted.
Automatically
- Page views, counted without cookies and without identifying you.
- Usage counts, such as how many drafts and emails an account has used, to apply plan limits.
- Cookies that keep you signed in and remember your time zone. There are no advertising or tracking cookies.
The free invoice generator
What you type into the free invoice generator stays in your browser. It is kept in that browser’s storage so a refresh doesn’t lose it, and it is not sent to the server. Printing an invoice from it, and which starting template was chosen, are counted, with nothing from the form attached to the count. The calculators work the same way: what you type into them is not sent or stored.
What it is used for
- To provide the product: drafting, storing and sending your invoices.
- To keep it secure and within its limits.
- To write to you about your account or about changes to the service.
Your data is not sold, and it is not used for advertising.
Who else handles it
The product is built on other companies’ services. Each receives only what it needs to do its part: Supabase (database, files and sign-in), Vercel (hosting and page-view counts), Anthropic (the AI model that drafts line items), Brevo (email delivery), Upstash (usage counts), and GitHub and Slack if you connect them. The security page says what each one receives.
Data may also be disclosed if the law requires it, or to protect the rights and safety of users and of the service.
Your clients’ information
You decide which clients to add and what to send them. Their details are used only to prepare and deliver your invoices. They are not contacted for any other purpose.
How long it is kept
For as long as your account exists. When you delete something in the app it is removed. When your account is deleted, everything stored for it is deleted with it, apart from what must be kept to meet legal obligations.
Your choices
- See and change your details in Settings at any time.
- Disconnect GitHub or Slack whenever you like.
- Ask for a copy of your data, a correction, or deletion of your account by writing to mail@bluenebula.dev.
Depending on where you live, the law may give you further rights over your personal data. Write to the same address to use them.
Where it is processed
The services above store and process data in the United States and possibly in other countries.
Children
The product is for people running a business and is not meant for children.
Changes
If this policy changes in a way that matters, the date above changes and account holders are told by email.
Contact
Questions about privacy go to mail@bluenebula.dev.