Privacy Policy

Who we are

Billz is run by Billz Pty Ltd [ACN / ABN to be added] ("Billz", "we", "us"). Billz is invoicing software for Australian small businesses. This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Two kinds of people in your data

You, the person who signs up and runs a business on Billz. We are responsible for the information we collect about you.

Your customers, the people you invoice. You decide who goes into your Billz account, so you are responsible for having a proper reason to hold their details. We store and process it for you, only so Billz can do its job, and we do not use your customers' details for our own purposes.

What we collect

• Your account details: name, email address and password (stored scrambled, not readable by us).
• Your business details: business name, ABN, address, logo, GST settings and the bank details you choose to print on invoices.
• Your customers' details: names, email addresses, phone numbers, addresses and ABNs, as you enter them.
• Your records: invoices, quotes, payments, expenses, receipt photos and the sentences you type into QuickBillz.
• Basic technical information needed to run the service: sign-in sessions, error logs and the time and device type of requests.

We do not collect information from you through advertising or tracking cookies, and we do not sell personal information.

How we use it

• To provide Billz: to make, store, send and track your invoices and quotes.
• To send you messages about your account, such as sign-in and security emails.
• To keep the service safe, fix problems and prevent misuse (for example, limiting how many emails an account can send in a day).
• To meet our legal obligations.

Who we share it with

We use a small number of service providers to run Billz. They handle information only to provide their service to us:

• Supabase: database, sign-in and file storage.
• Vercel: web hosting.
• Resend: sending the emails you ask Billz to send, such as an invoice to your customer.
• Google Cloud Vision: only when you upload a receipt photo and our own reader cannot read it well enough. The image is sent for text recognition.
• [A payment provider, once paid plans are switched on.]

We may also disclose information where the law requires it, or where you ask us to. We do not share your information with anyone else.

Sending information overseas

Some of the providers above may store or process information outside Australia, including in the United States. [Confirm hosting regions before launch.] We take reasonable steps to make sure they protect it to a standard consistent with the Australian Privacy Principles.

Keeping it safe, and how long we keep it

Information is stored with encryption in transit, and access to each business's records is limited to the people that business has invited. No system is perfectly secure. If a breach is likely to cause serious harm, we will tell the people affected and the Office of the Australian Information Commissioner, as the law requires.

We keep your records while your account is open. Australian tax law generally requires businesses to keep records for five years, so it is a good idea to download your invoices before closing an account. When an account is closed we delete or de-identify its information within [30] days, except where we must keep something by law.

Seeing and correcting your information

You can see and edit most of your information inside Billz. For anything else, including a copy of what we hold about you, a correction, or deletion of your account, email us at [support email]. We will answer within [30] days. If your customer asks you about their details, you can usually answer from your own Billz records.

Cookies

Billz uses only the cookies and browser storage it needs to keep you signed in and to remember settings such as light or dark mode. There are no advertising or tracking cookies.

Complaints

If you think we have mishandled your information, tell us at [support email] and we will look into it. If you are not happy with our response you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

If we change this policy in a way that matters, we will update the date at the top and tell account holders by email or in the app.