Use it to get paid. Never to cause harm.
WhizInvoice helps honest businesses turn enquiries into paid invoices. These rules keep it that way for everyone, including your clients.
Last updated 18 October 2026
1. Who these rules apply to
This policy is part of our Terms of service. It applies to everyone who uses WhizInvoice, including your team members, and to everything you send through it. You are responsible for making sure your team follows it.
2. No spam
- Send emails, quotes and invoices only to people who asked for them, or with whom you have a business relationship that lets you contact them under your law.
- WhizInvoice is for quotes, invoices, reminders and statements. Do not use it to send bulk marketing.
- Never hide who you are, forge sender details, or use misleading subject lines.
- If someone asks you to stop contacting them, stop.
The anti spam laws that apply where you and your clients are come first. Sections 15 to 19 set out the main ones.
3. No fraud or fake invoices
- Do not invoice for work you did not do or goods you did not supply.
- Do not pretend to be another business or person, or copy another business’s invoices or branding.
- Do not use WhizInvoice for phishing, false payment details, invoice redirection scams or any other deception.
- Do not use it to launder money, evade tax or get around sanctions.
4. No illegal goods or services
Do not use WhizInvoice to quote, invoice or take payment for anything that is illegal where you or your client are, or to help anyone else break the law.
5. No harassment or abuse
Do not use WhizInvoice to threaten, harass, intimidate or abuse anyone, or to send hateful or discriminatory content. Payment reminders must be fair and lawful, and must follow the debt collection rules that apply to you.
6. No malware or attacks
- Do not upload or send viruses, malicious code, or links to harmful websites.
- Do not try to overload, disrupt or damage WhizInvoice, our providers or anyone else’s systems.
- Do not try to get around plan limits, rate limits or any security measure.
7. No scraping or harvesting
Do not scrape, crawl or harvest data from WhizInvoice, and do not try to access any account or data that is not yours. Use only the connector and any other tools we provide for that purpose to send data into your account.
8. No reselling access
Do not sell, rent, sublicense or share access to WhizInvoice, and do not share sign in details. Each person who uses your account needs their own team member login, within your plan’s limits. You can run several brands of your own business in one account on the Multi brand plan. If you want to use WhizInvoice to serve other businesses, for example as an agency or bookkeeper, ask us first at support@whizinvoice.com.
9. No security testing without permission
Do not probe, scan or test WhizInvoice for vulnerabilities, except under the rules and safe harbour on our Security page. If you find a problem, please report it to security@whizinvoice.com.
10. Respect your clients’ privacy
You are the controller of your clients’ data, so their privacy is in your hands. You must:
- follow the privacy laws that apply to you and to your clients;
- tell people how you use their details, for example with a privacy notice on your website forms;
- collect only what you need, and have a lawful reason to use it;
- answer your clients’ requests to see, correct or delete their details;
- not put sensitive data, such as health information or government identity numbers, into WhizInvoice unless you need it to do the job and the law allows it.
11. Your websites and the connector
Install the WhizInvoice connector only on websites you own or control, and only connect forms whose entries you are allowed to collect.
12. AI features
Do not use AI features to create content that breaks these rules or the law, or to attack or misuse the AI providers’ systems. Check every AI output before you use it.
13. Reporting abuse
If you think someone is using WhizInvoice for spam, fraud, illegal content or abuse, email legal@whizinvoice.com. Tell us what you saw, where, and why you think it breaks the rules. Report security vulnerabilities to security@whizinvoice.com. We review every report and act where we find a problem.
14. What happens if the rules are broken
Depending on how serious it is, we may warn you, remove content, pause sending, limit or suspend your account, or close it, as section 22 of our Terms of service explains. Where the law requires it, we will report illegal activity to the authorities.
You can still download your data, unless the law stops us from allowing that or the data itself is unlawful.
15. Europe and the United Kingdom
15.1 European Union and EEA
The ePrivacy Directive, as each country has put it into law, requires prior consent for marketing emails to individuals. There is a narrow exception for your existing customers about similar products or services, as long as they were given a clear chance to opt out when you collected their details and in every message. Quotes and invoices a client asked for are not marketing. The GDPR applies to the personal data of your clients.
15.2 United Kingdom
The Privacy and Electronic Communications Regulations 2003 (PECR) take the same approach, including the soft opt in for existing customers. The UK GDPR applies to the personal data of your clients.
16. United States
The CAN-SPAM Act applies to commercial email. Do not use false or misleading header information or subject lines, identify advertising as advertising, include a valid postal address, and give a clear way to opt out, honouring opt outs within 10 business days. Messages that only confirm or complete a transaction, such as invoices, are mostly exempt, but they must never be misleading. State privacy and consumer laws may also apply to your clients’ data.
17. Canada
Canada’s Anti Spam Legislation (CASL) requires express or implied consent before you send commercial electronic messages. A quote a client asked for, or a message that confirms or completes a transaction, does not need consent, but it must still identify you and include a working way to unsubscribe. Act on an unsubscribe within 10 business days. PIPEDA and the provincial privacy laws apply to your clients’ data.
18. Australia and New Zealand
18.1 Australia
The Spam Act 2003 requires consent for commercial electronic messages, accurate sender identification, and a working unsubscribe. Invoices and quotes that contain only factual information must still identify you as the sender. The Privacy Act 1988 may apply to your clients’ data.
18.2 New Zealand
The Unsolicited Electronic Messages Act 2007 requires consent for commercial electronic messages, accurate sender information and a working unsubscribe. The Privacy Act 2020 applies to your clients’ data.
19. Everywhere else
Most countries have anti spam, consumer and privacy laws, such as Singapore’s Spam Control Act, the direct marketing rules in South Africa’s POPIA, and Brazil’s LGPD. Follow the laws that apply where you and your clients are. If you are not sure, the safe rule is simple: send only what your client asked for or expects, say clearly who you are, and stop when asked.
20. Changes to this policy
We may update this policy as the law and our service change. If a change is material, we will tell you at least 30 days before it takes effect, as our Terms of service explain.
21. Contact
Questions about this policy? Email legal@whizinvoice.com.