← MostlySame

Privacy Policy

15 September 2026

1. Who we are and what this policy covers

3 Bridges LLC, a Wyoming limited liability company, United States (we, us, our), operates MostlySame Invoices (Service). This policy covers personal information processed through our website, application, trials, launch-notification form and related communications.

The Service is available to businesses, self-employed users and other adult individuals who may lawfully issue invoices under applicable law. Users are responsible for their authority to issue invoices and for complying with the law governing their activities; the Service is a technical tool.

We determine the purposes of processing for our account administration, communications and operational activities. Where a customer puts information about clients, suppliers, personnel or other people into the Service, that customer normally determines the purposes of that use, and we process the information on its behalf. If the customer itself acts for another controller, our role may be that of a subprocessor. The applicable law and actual processing determine these roles, not whether the customer is registered as a business. Appendix A to the Terms of Service addresses processing terms where required by applicable law.

If your information appears in another customer's invoice or records, contact that customer about its use of the information. You may also contact us; we handle or refer the request and assist the responsible customer to the extent required by applicable law. The customer's own notices and legal obligations govern its decisions about invoicing and recordkeeping.

Contact: l@3bridges.pro

2. Information we process

CategoryExamples and source
Account and authentication informationEmail address, credential hash, account settings, verification/reset records and session information supplied by you or generated as you use the Service.
Billing and subscription information, if you purchase a paid planBilling contact and tax details, selected plan, payment information supplied at checkout, payment-method and transaction references, amounts, currencies, dates, payment/refund status, paid-period dates, and records of subscription consent and cancellation supplied by you, generated by the Service or received from payment and billing providers.
Customer and invoice informationNames, business and personal contact details, addresses, tax identifiers, payment requisites, line items, amounts, currencies, dates, payment status, logos, documents and imports supplied by customers or generated from their instructions. Invoice issuers, recipients and other people in these records may be individuals or organizations.
Usage and operational informationAccount or trial identifiers, IP addresses, request identifiers, timestamps, routes visited, downloads, actions and technical errors generated during use. Our first-party usage and action records can be associated with an account.
Browser and analytics informationCookies and similar identifiers, browser/device information, pages and URLs viewed, referral information and interaction events collected through browser storage and analytics technologies.
Communications and launch notificationsYour email address, messages and information you include when contacting us or requesting a launch notification. Submissions may be retained in the email system even when the website has no separate mailing-list database.

We receive information from you, your browser/device, customers who provide information about others, and service providers involved in delivering the Service. Do not include passwords, private keys, payment-card security codes or specially regulated information in invoice content, support messages or other Customer Data where the Service is not designed to handle it.

3. Purposes and, where applicable, legal bases

We process information for the following purposes:

Where a legal basis must be identified, the basis depends on the activity and the person concerned: performance of a contract with you or steps you request before entering it; legitimate interests in operating, supporting and protecting the business and Service where those interests lawfully justify the processing; compliance with applicable legal obligations; or consent where required. Our contract with a company does not by itself make each employee or invoice recipient a party to it. Customer-directed processing follows the customer's lawful instructions and the applicable processing terms.

Required account information is needed to provide the associated functions. You may choose whether to provide optional information, but withholding information needed for a requested function may prevent its use. Providing information through registration does not constitute blanket consent to every optional processing purpose.

The Service performs automated technical calculations, conversions and other operations on records. These outputs do not determine your legal obligations or constitute our professional decisions about you; users decide whether and how to apply them. Any rights concerning automated decision-making apply as provided by applicable law.

4. Cookies, browser storage and analytics

The Service uses browser storage for authentication and sessions, request security, temporary workflow state and preferences such as appearance. Some storage is necessary for the requested functions; other storage supports analytics.

Where configured, we use Google Analytics 4 to measure visits and interactions. The analytics tag can collect cookie or similar identifiers, browser/device information, page URLs, referring pages and event information. Our custom interaction events use defined categories and counts, but that restriction does not make all automatically collected information anonymous. Separately, our own operational records include account identifiers and IP addresses.

Page URLs may contain search text or other parameters, and collecting a page URL can include those values. Our processing obligations remain governed by applicable law; this notice does not transfer those obligations to you or substitute for consent where consent is required.

You can control cookies and local storage through your browser. Disabling storage may affect login and other functions. Google's handling of information is described in its Privacy Policy. Rights to object, withdraw consent or request other controls apply as described below and under applicable law.

5. Recipients and disclosures

Information may be made available to the hosting and email providers we use to operate the Service, and to other relevant providers and authorized people, as needed for the stated purposes. Recipients include:

RecipientRole
Hosting providersHosting, record/document storage and infrastructure operation.
Email providersService-email delivery and mailbox processing, including support and launch-notification submissions.
Payment and billing providersProcessing authorized subscription payments and applicable refunds, administering billing and helping handle fraud or payment disputes when you purchase a paid plan.
GoogleGoogle Analytics processing described in section 4, when enabled.
Authorized operational personnel and professional advisersAdministration, support, troubleshooting, legal/accounting assistance or handling a particular claim or incident, as relevant to their role.

Information is also disclosed when you direct an export or other available disclosure, when law requires or permits disclosure for a relevant legal or security purpose, or in connection with a business transfer where applicable law permits it. A new recipient or use remains subject to the notices, agreements and safeguards required by applicable law.

The rights granted over customer records are limited by the Terms and applicable processing terms. A third party that independently receives information from you or from an invoice customer is responsible for its own processing.

Processing and transfers remain subject to the safeguards and disclosures required by applicable law. Where that law entitles you to information about recipients or a copy of applicable transfer safeguards, we provide it as required; you may contact l@3bridges.pro to exercise that right.

6. Retention and deletion

Retention depends on the information, the purpose for which it is processed, the account's status, operational/security needs, applicable recordkeeping requirements and the period relevant to a legal claim. The existence of information in a system is not a promise that it will be preserved, remain accessible or be recoverable.

Deleting your account and data. You permanently delete your account and its associated data using the account deletion button. Before deleting a paid account, first cancel automatic renewal in billing settings. Once renewal is off, you can delete the account during the remaining paid period; you do not have to wait for expiry. Account access ends immediately. The Service automatically removes the account and associated data from active systems, subject to the limited lawful retention described below. No manual action by our staff is involved.

Canceling automatic renewal alone leaves paid access available until the paid period ends, subject to the Terms. Permanently deleting the account ends the subscription and all access immediately at your direction, including unused paid access. It does not generate a refund, except where applicable law or the accepted purchase offer requires one. Section 5 of the Terms explains these billing consequences. They do not condition statutory privacy rights on subscription cancellation; those rights and their contact route are described in section 8.

Your responsibility. You are responsible for your decision to delete the account and data, your authority over them, and keeping independent copies of any invoices or other records you must retain before activating deletion. Once carried out, deletion cannot be undone through the Service. The Terms explain the allocation of responsibility for deletion correctly carried out through your use of the deletion button; this does not waive your statutory privacy rights or our own legal duties.

Residual backup copies. After the data is deleted from active systems, residual copies in backups, deletion archives or other recovery copies may remain for no more than one calendar month, after which they are permanently deleted. During that period, the deleted data is restricted from ordinary use. This is a maximum deadline for removing those copies, not a minimum storage period, a cancellation period or a guarantee that a usable backup exists. We do not promise to restore deleted data.

Limited billing and related records after account deletion. We may retain specific records of payments, subscription consent, cancellation, account-deletion instructions and refunds where needed and lawfully permitted for billing, tax, dispute or other legal purposes. These records have purpose-based retention periods and remain subject to applicable privacy rights. They do not keep your account active, preserve paid access or constitute a recoverable copy of the deleted account and its invoicing data.

Limited lawful retention. Specific records may be retained after deletion only where required by law or where a lawful exception permits retention for a defined legal or security purpose, and only for as long as that basis applies. Those records are restricted to that purpose and are not retained as a recoverable copy of your deleted data. This exception does not create a general extension of the one-month backup deadline. It also does not authorize indefinite retention without a lawful basis. Deleting information from our systems does not delete copies independently held by you or third parties to whom you provided it.

The deletion timetable above remains subject to any shorter period or other action required by applicable law or mandatory processing terms. It does not provide a minimum storage period, archival service or restoration guarantee.

7. Security and incidents

We use administrative and technical measures to protect information as required by applicable law. No system or transmission method provides absolute security, and information may be lost, corrupted, disclosed or accessed without authorization. This policy does not guarantee that an incident will not occur or that information can be restored.

You are responsible for securing your credentials, devices, copies and authorized access. Our own obligations concerning safeguards and incident handling, including any notifications required by law, remain with us and are not waived by these statements or by the Terms.

8. Your rights and choices

Depending on the law applicable to you and the processing, you may have rights to obtain information and access a copy of personal information; correct it; request deletion, restriction or portability; object to processing; withdraw consent for processing based on consent; or exercise applicable rights concerning automated decisions, sale/sharing, targeted advertising or sensitive information. These rights and their exceptions are those provided by the applicable law, rather than additional contractual rights granted by this policy.

You can delete your account and its associated data yourself as described in section 6. To exercise statutory privacy rights, including where you cannot access your account, contact l@3bridges.pro and identify the information or account concerned. We may request information needed to verify your identity or the authority of your representative. Do not send passwords, private keys or unnecessary sensitive documents. Statutory requests, permitted extensions, any legally allowed fee or refusal, and any appeal or explanation are handled according to the applicable legal requirements and time limits.

Where we process information on a customer's behalf, we may refer the request to that customer and provide the assistance the law requires. You may complain to the competent data-protection authority or use another remedy available under applicable law. Withdrawal of consent does not affect earlier lawful processing or processing that has another lawful basis. Any statutory protection against discrimination for exercising rights remains unaffected.

9. Children and changes

The Service is intended for adults, including individual users who may lawfully issue invoices, and is not intended for children. Do not create an account if you are under 18. Contact us if you believe information about a child has been provided in circumstances requiring action under applicable law.

We may update this policy to describe changes in the Service, processing or legal requirements. An updated version identifies when it takes effect. Additional notice, consent or other action is provided or taken where applicable law requires it. A policy change does not retroactively supply a missing lawful basis or consent.

10. Contact

3 Bridges LLC
Email for privacy requests: l@3bridges.pro