Checked against your PSA, then kept only in an encrypted cookie in this browser (30 days if you stay connected, otherwise until you close it). Never stored on our servers. The Halo API application needs the "all" permission and must be allowed to read and edit recurring invoices.