Privacy Policy

This Privacy Policy explains what information Billcraft (“we,” “us”) collects, how we use it, and the choices you have. It’s part of our Terms of Service.

1. Information we collect

• Account information. Your email address and password (stored securely, hashed, by our authentication provider — we never see or store your plaintext password).
• Invoice data you enter. Business name, client name, and the other fields you fill in on the invoice form, including any personal information about your clients that you choose to include (e.g., their name, email, or address).
• Payment information. If you subscribe to Pro, our payment processor, Stripe, collects and stores your card details directly — we never receive or store your full card number. We do store your Stripe customer and subscription IDs to manage your subscription.
• Usage information. How many documents you’ve downloaded (to enforce the free-tier limit) and basic technical logs (e.g., timestamps, error logs) generated by our hosting and database providers.

2. What we don’t do

Invoice documents are generated on demand and streamed directly to your browser — we don’t currently save a copy of the generated PDF/Excel file, or the invoice data you typed to create it, once your session ends. (If we later add an optional “save history” feature, we’ll update this policy and make clear that it’s opt-in.) We don’t sell your personal information to third parties, and we don’t use third-party advertising trackers.

3. How we use your information

• To provide, maintain, and secure the Service, including authenticating you and enforcing plan limits;
• To process payments and manage your subscription;
• To send transactional emails (e.g., signup confirmation, billing receipts, password resets) — we don’t send marketing email unless you separately opt in;
• To detect, investigate, and prevent fraud or abuse of the Service (see the Acceptable Use section of our Terms); and
• To comply with legal obligations.

4. Who we share it with

We use the following sub-processors to operate Billcraft:

• Supabase — authentication and database hosting.
• Stripe — payment processing and subscription billing.
• Resend — transactional email delivery (signup confirmation, etc.).

Each of these providers processes data on our behalf under their own privacy and security commitments. We don’t share your information with anyone else except where required by law or to protect our legal rights.

5. Data retention

We keep your account information for as long as your account is active. If you delete your account, we delete your profile and stop billing you; some records (e.g., payment history) may be retained by Stripe as required for tax, accounting, or fraud-prevention purposes.

6. Your rights

Depending on where you live, you may have the right to access, correct, or delete your personal information, or to object to certain processing. To exercise these rights, email support@billcraft.app and we’ll respond within a reasonable time.

7. Cookies and local storage

We use essential cookies to keep you signed in (managed by our authentication provider) and browser local storage for lightweight, non-essential UI preferences. We don’t use third-party advertising or analytics cookies.

8. Children’s privacy

Billcraft isn’t directed at children, and you must be at least 18 (or the age of majority in your jurisdiction) to use it. We don’t knowingly collect personal information from children.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we’ll notify you by email or through the app.

10. Contact

Questions about this policy? Contact us at support@billcraft.app.