Effective October 10, 2026
Privacy Policy
MIGS is operated by Development HQ AI Engineering Studio. This policy explains how information is handled when you use the Master Invoice Generation System.
Information we process
MIGS processes account information, business profile details, client contact details, invoice data, pricing information, market-source references, uploaded branding, optional proof-of-service or reimbursement images, and usage information needed to operate the service.
How information is used
Information is used to authenticate users, generate and store invoice packages, apply your company branding, create AI-assisted narrative text from facts you provide, generate downloadable documents, display private proof images through temporary signed links, operate the Autonomous Invoice Agent, classify connected receivables, maintain customer invoice files, deliver approved invoice emails and scheduled follow-up reminders, track partial/full payment status, enforce plan limits, secure the service, and improve reliability.
Client information
You are responsible for having an appropriate business or legal basis to enter and process your clients' information in MIGS. Do not upload information you are not authorized to use.
AI processing
When you request AI-assisted package generation, the written information in that invoice may be processed by the AI services used by MIGS to generate client-facing narrative text. Proof images are not required for AI narrative generation. MIGS instructs the model not to invent prices, market sources, deliverables, or project facts.
Data access and isolation
MIGS is designed so authenticated customers can access only records owned by their own account. Administrative access may be used when necessary for security, support, fraud prevention, or service operation.
Retention and deletion
Records remain available while your account is active unless deleted by you or retained as required for security, legal, billing, or operational purposes. Proof images are stored in private file storage and may remain temporarily in provider storage or backups after the related invoice or account record is deleted, subject to the storage provider's deletion and backup lifecycle. Account-deletion controls should be used when you no longer want MIGS to retain your account data.
MIGS Connect data
When you use MIGS Connect, MIGS may process organization identifiers, connected-application identifiers, source-record references, invoice-source snapshots, customer contact details, receivable status, payment-status updates, API credential metadata, request logs, usage events, audit events, webhook delivery records, server-generated PDF metadata, security events, and keyed request-fingerprint telemetry needed to operate and secure the API. MIGS does not intentionally store raw API secrets or raw network identifiers in the request-fingerprint layer. Secret API keys are not stored in retrievable plaintext after creation; only a cryptographic hash and non-secret prefix are retained.
Autonomous Invoice Agent
If enabled, the Autonomous Invoice Agent may classify connected receivables as new, current, due soon, late, past due, partially paid, or paid; stage candidate invoices for user review; organize approved invoices into customer files; schedule follow-up; and reconcile payment state. Invoice creation remains subject to the configured approval gate. Follow-up automation acts only on approved/sent invoices and stops when the recorded balance reaches zero or the workflow is paused.
Test and live environments
MIGS Connect separates test and live application environments. Test-mode records may be marked as non-production and are not intended to represent live receivables. Developers are responsible for keeping test credentials out of production systems and live credentials out of development environments.
Third-party services
MIGS may rely on infrastructure, email delivery, billing, AI, and other service providers. Those providers process data only as needed to deliver their services and are subject to their own terms and privacy practices.
Security
MIGS uses authenticated access, row-level data controls, service-side authorization, private storage for invoice proof images, and temporary signed links when those images need to be displayed. No online service can guarantee absolute security.
Changes
This policy may be updated as MIGS evolves. Material changes will be reflected by a revised effective date.