Privacy Policy
Last updated: June 2, 2026
This Privacy Policy explains how Koren Enterprises LLC, doing business as Independent Management Workspaces (“IMW,” “we,” “us”) collects, uses, and protects information when you visit this website or use IMW Invoice (the “Service”), our hosted invoicing, time-tracking, and billing platform. By using the Service, you agree to the practices described here.
Information we collect
Account information
When you create an account we collect your name, email address, a hashed password, and your company details (company name, billing and remit-to addresses, and tax settings).
Business data you store
The Service exists to hold the data you put into it: your customers and contacts, invoices and line items, expenses, time entries, recurring templates, and payment records. We treat this as your data. Each company’s data lives in its own dedicated database, not mixed into shared tables with other customers.
Payment information
Card and ACH payments are handled by third-party payment processors (Authorize.Net, Stripe, and PayPal). Those processors collect and process payment details directly under their own terms. We do not store payment information on our servers.
Imported data
If you import from another invoicing tool, we process the exports you provide for customers, invoices, expenses, and recurring items so we can recreate that history in your account.
Technical and usage data
Like most web services, we automatically collect log data such as your IP address, browser and device type, pages requested, and timestamps. We use a single essential session cookie to keep you signed in. We do not use third-party advertising or cross-site tracking cookies.
How we use information
- To provide, operate, and maintain the Service, including creating, sending, and storing your invoices.
- To process payments through our payment processors and reconcile them against invoices.
- To send transactional and service messages (for example, payment receipts, account notices, and replies to your requests).
- To provide support and respond to your questions.
- To secure the Service, prevent abuse, and maintain backups.
- To improve the Service and to comply with our legal obligations.
How we share information
We do not sell your personal information. We share data only as needed to run the Service:
- Service providers and subprocessors who help us operate, such as payment processors, hosting and infrastructure providers, and email delivery services. They may access data only to perform work for us and are bound to protect it.
- Legal and safety reasons, when required by law or to protect the rights, safety, and property of IMW, our users, or others.
- Business transfers, if IMW is involved in a merger, acquisition, or sale of assets, in which case we will continue to protect your information and notify you of any change in ownership.
Connecting AI assistants
You can connect your IMW Invoice account to an AI assistant such as Claude, ChatGPT, Grok, or Gemini (provided by third parties such as Anthropic, OpenAI, xAI, or Google) through a secure connector. You authorize the connection yourself from the assistant, sign in with your existing IMW Invoice login, and choose the single company the assistant may access. Access is read-only unless you explicitly grant write access; with write access, the assistant can create customers, create and send invoices, and record payments on your behalf at your direction. You can disconnect the assistant at any time.
When you use the connector, the data the assistant requests, and the instructions you give it, are sent to your AI provider and are then subject to that provider's own privacy and data-retention terms, which may differ from this policy and may not be covered by any zero-retention arrangement. We do not control how your AI provider uses that data, so please review your AI provider's terms before connecting.
We do not use your business data to train AI models, and we do not sell your data. The connector sends data only in response to requests you or your authorized assistant make; we never send your data to an AI provider on our own initiative.
Your data is yours
You can export a full SQL dump of your account on request at any time. Your data is never locked into a proprietary format. When you close your account or ask us to delete your data, we remove it from active systems within 30 days, after which it ages out of routine backups, subject to any retention we are legally required to keep. To request a copy of your data or ask us to delete it, email us at [email protected].
Data retention
We retain your information for as long as your account is active and as needed to provide the Service. We may retain limited information after closure where necessary to comply with legal obligations, resolve disputes, and enforce our agreements.
Security
We protect your data in transit with TLS encryption, keep daily backups, and isolate each company’s data in its own database. No method of transmission or storage is completely secure, but we work to protect your information using reasonable, industry-standard safeguards.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise these rights, or ask any privacy question, by emailing us at [email protected]. We will respond within a reasonable timeframe.
Children
The Service is intended for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and for material changes we will provide a more prominent notice.
Contact us
Questions about this policy or your data? Email us at [email protected] and a real person on our team will reply.