Privacy Policy

Billeron ("we", "us", or "our"), accessible at https://www.billeron.com/, is committed to protecting the privacy of our users. This Privacy Policy explains what personal data we collect, how we use it, with whom we share it, and what rights you have regarding your data.

This Policy applies to all users of the Billeron platform, including visitors to https://www.billeron.com/ and registered account holders. By using Billeron, you acknowledge that you have read and understood this Privacy Policy.

We comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and other internationally recognised data protection standards.

We collect the following categories of personal data:

• Account Data: Name, email address, and password (stored in hashed form) provided during registration.

• Profile & Company Data: Company name, tax identification number, address, phone number, and company logo that you voluntarily provide within the platform.

• Invoice & Transaction Data: Invoices you create, including sender and recipient information, line items, amounts, and payment status.

• Payment & Billing Data: Subscription plan details and billing history. We do not store full card numbers — payment processing is handled by our third-party processors (Stripe and LemonSqueezy).

• Usage Data: Log files, IP addresses, browser type, operating system, pages visited, and features used. This data is collected automatically when you access https://www.billeron.com/.

• Communications: Any messages or support requests you send to us through https://www.billeron.com/.

We use your personal data only for the purposes described below:

• Service Delivery: To provide, operate, and maintain the Billeron platform, including invoice creation, email delivery, and payment processing.

• Account Management: To create and manage your account, verify your identity, and communicate account-related information.

• Billing & Subscriptions: To process subscription payments, issue invoices for our own services, and manage plan upgrades or downgrades.

• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, unauthorised access, and other illegal activities.

• Product Improvement: To analyse usage patterns and improve the features, performance, and usability of the platform.

• Legal Compliance: To comply with applicable laws, regulations, court orders, and requests from public authorities.

• Communications: To send service announcements, security alerts, and support messages. We will not send marketing emails without your explicit consent.

We process your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is required to perform the contract between you and Billeron (i.e., to provide the Services you signed up for).

• Legal Obligation: Processing is necessary to comply with a legal obligation under applicable laws or regulations.

• Legitimate Interests: Processing is in our legitimate interest (e.g., improving the platform, preventing fraud, ensuring security), provided such interests are not overridden by your rights.

• Consent: For certain optional data uses (such as marketing communications), we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

We do not sell your personal data. We share your data only in the following limited circumstances:

• Service Providers: We engage trusted third-party companies to help us deliver the Services, including Firebase (Google) for authentication and database storage, Stripe for payment processing, LemonSqueezy for subscription management, and Resend for transactional email delivery. These providers are contractually bound to process data only on our instructions.

• Your Clients: When you send an invoice via Billeron, the invoice data (including your company information and the client's information) is transmitted to your client's email address as specified by you.

• Business Transfers: If Billeron is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

• Legal Requirements: We may disclose your data if required to do so by law or in response to valid requests from public authorities (e.g., a court order or government agency).

• Protection of Rights: We may disclose data to protect the rights, property, or safety of Billeron, our users, or the public, as required or permitted by law.

We retain your personal data for as long as your account is active or as needed to provide the Services. Specifically:

• Account data is retained for the duration of your account and deleted within 30 days of account termination upon request.

• Invoice and transaction data may be retained for up to 7 years to comply with applicable accounting and financial record-keeping requirements, even after account closure.

• Usage logs are retained for a maximum of 12 months and then anonymised or deleted.

After the applicable retention period, your data will be securely deleted or anonymised. You may request early deletion of certain data by contacting us at https://www.billeron.com/, subject to our legal retention obligations.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• Encryption of data in transit using industry-standard TLS (Transport Layer Security).

• Secure password hashing — we never store passwords in plaintext.

• Role-based access controls limiting employee access to personal data.

• Regular security assessments and monitoring of our systems.

Despite these measures, no method of internet transmission or electronic storage is completely secure. If you suspect a security breach affecting your account, please contact us immediately through https://www.billeron.com/.

Billeron uses cookies and similar technologies to ensure the platform functions correctly and to improve your experience. We use the following types of cookies:

• Essential Cookies: Required for the platform to function (e.g., session authentication tokens). These cannot be disabled.

• Analytics Cookies: Used to understand how users interact with https://www.billeron.com/ so we can improve the platform. These are collected in aggregate and do not identify you individually.

You can control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of the platform. By continuing to use Billeron, you consent to our use of essential cookies.

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.

• Right to Rectification: You may request correction of inaccurate or incomplete personal data.

• Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations.

• Right to Data Portability: You may request that we provide your data in a structured, machine-readable format.

• Right to Object: You may object to processing based on our legitimate interests.

• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

• Right to Complain: You have the right to lodge a complaint with a relevant data protection authority in your jurisdiction if you believe your data has been processed unlawfully.

To exercise any of these rights, please submit a request through https://www.billeron.com/. We will respond within 30 days.

The Billeron platform may contain links to third-party websites or integrate with third-party services (such as Stripe for payments). This Privacy Policy applies solely to data collected and processed by Billeron.

We are not responsible for the privacy practices of third-party sites or services. We encourage you to review the privacy policies of any third-party services you use in connection with Billeron.

The Billeron platform is intended for use by individuals who are at least 18 years of age. We do not knowingly collect personal data from children under the age of 18.

If we become aware that we have collected personal data from a child under 18 without verification of parental consent, we will take steps to delete that information as quickly as possible. If you believe we may have such information, please contact us at https://www.billeron.com/.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by email or by posting a prominent notice on https://www.billeron.com/ at least 14 days before the changes take effect.

Your continued use of the Billeron platform after the effective date of the updated Policy constitutes your acceptance of the changes. We encourage you to review this page periodically to stay informed about how we protect your data.

Billeron is the data controller responsible for the personal data collected through https://www.billeron.com/. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us through our website:

• Website: https://www.billeron.com/

We will make every reasonable effort to address your enquiry promptly and within the timeframes required by applicable law.