Privacy Policy

• Account details — your name, email address, and a securely hashed password. We never store your password in plain text.
• Business & document data you enter — business profile (name, TIN, address, logo, payment details), clients, saved items, and the documents you create.
• Uploaded images — your logo and payment QR images.
• Billing metadata — your plan, subscription dates, and a payment method summary (e.g. card brand and last 4 digits). We never see or store full card numbers.
• Technical data — basic logs and cookies needed to keep you signed in and to operate the service securely.

• To provide the service — generating your documents and saving your data.
• To process subscription payments and manage your plan.
• To send essential account emails (e.g. password reset).
• To secure the service, prevent abuse, and comply with the law.

We do not sell your personal data, and we do not use your documents or client lists for advertising.

We use trusted processors to run Billis. Each receives only what it needs:

• Neon — managed PostgreSQL database (Singapore region) storing your account and document data.
• Supabase Storage — hosting of your uploaded logo and QR images.
• PayMongo — payment processing for subscriptions. Card and e-wallet details are handled directly by PayMongo.
• Resend — delivery of transactional emails such as password resets.
• Vercel — application hosting and delivery.

We use a small number of strictly necessary cookies to keep you signed in and to protect the service. We do not use third-party advertising or cross-site tracking cookies.

We keep your data while your account is active. If you delete your account or ask us to delete your data, we remove it within a reasonable period, except where we must retain limited records to meet legal or accounting obligations.

Under the Data Privacy Act you may access, correct, or request deletion of your personal data, and object to certain processing. You can edit most data directly in the app, or contact us to exercise these rights.

We use encryption in transit (HTTPS), hashed passwords, and access controls. No system is perfectly secure, but we work to protect your information and to notify you of material incidents as required by law.

Billis is intended for users aged 18 and over and is not directed at children.

We may update this policy from time to time; we will revise the "last updated" date above. Questions or requests? Email us at support@billis.online.