Privacy Policy

1. Who we are

Billio (trybillio.com) is operated by SIA Tech Dev Baltic, a company registered in Latvia (reg. No. 40203459117, VAT No. LV40203459117, registered office: Gailenu street 6-1, Riga, LV-1023, Latvia) — the data controller for the personal data described in this policy. Contact: support@trybillio.com.

2. Data we collect

• Account data — your name, email address, and a securely hashed password.
• Organization data — your agency's name, billing details, VAT number, logo, and invoice settings.
• Content you enter — clients, projects, time entries, and invoices. Where this includes personal data about your own clients, you remain the controller of that data and we process it on your behalf to provide the service.
• Payment data — subscription payments are handled entirely by Stripe; we never receive or store card numbers. We store your Stripe customer and subscription identifiers.
• Technical data — IP addresses and request metadata in server logs (abuse prevention and rate limiting) and error reports if something in the app fails.

We do not use advertising or analytics trackers. The only cookies Billio sets are essential authentication cookies needed to keep you signed in.

3. Why we process it

• To provide the service (performance of contract) — accounts, time tracking, invoicing, emails you trigger such as invoice sending and team invitations.
• To take payment (performance of contract and legal obligations) — via Stripe.
• To keep the service secure and reliable (legitimate interest) — rate limiting, abuse prevention, and error monitoring.

4. Who processes it for us

We use the following processors to run Billio:

• Supabase — database, authentication, and file storage, hosted on AWS in Stockholm, Sweden (EU).
• Vercel — application hosting and delivery.
• Stripe — payment processing.
• Resend — transactional email delivery (EU region).
• Sentry — error monitoring (EU region).

Where a provider processes data outside the EU/EEA, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

5. How long we keep it

Your data is retained while your account is active. If you delete your account (or ask us to), we delete your data, except records we must keep to comply with accounting and tax law.

6. Your rights

Under the GDPR you can request access to, correction of, deletion of, or a portable copy of your personal data, and you can object to or ask us to restrict certain processing. Email support@trybillio.com and we will respond within 30 days. You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) or your local supervisory authority.

7. Changes

If we make material changes to this policy, we will notify account owners by email before the changes take effect.