Legal

Privacy Policy

Last updated: June 6, 2025

This policy explains what information Billably collects, how we use it, and what rights you have over your data. We've written it in plain language — no legalese walls of text.

1. Who we are

Billably ("we", "our", or "us") is an invoice management and payment follow-up service operated at billably.net. We help freelancers and small businesses track invoices and send automated payment reminders to their clients.

2. Information we collect

  • Account information: When you sign up, we collect your name, business name, and email address.
  • Invoice and client data: We store the invoice details and client information you enter into Billably so we can display them to you and power your reminder workflow.
  • Gmail access: If you choose to connect your Gmail account, we request the gmail.send permission. This allows Billably to send invoice reminder emails from your Gmail address on your behalf. We do not read, store, or process any of your existing emails. We only send emails you explicitly trigger through Billably.
  • Payment information: Billing and subscription payments are processed by Stripe. We do not store your card details — Stripe handles all payment data under their own privacy policy.
  • Usage data: We may collect basic usage information (pages visited, features used) to improve the product. This data is aggregated and not linked to individual actions.

3. How we use your information

  • To operate and provide the Billably service
  • To send invoice reminder emails from your Gmail account when you request it
  • To process your subscription and manage billing
  • To send you important product updates or security notices (not marketing, unless you opt in)
  • To improve and debug the product using aggregated usage data

4. Gmail data — important details

When you connect your Gmail account, Billably uses OAuth 2.0 to obtain a limited access token with the gmail.send scope only. This means:

  • We can send emails from your Gmail address — nothing else.
  • We cannot read, delete, or modify any of your existing emails or contacts.
  • Your Gmail refresh token is encrypted with AES-256-GCM before being stored.
  • You can revoke access at any time from your Google Account settings (myaccount.google.com/permissions) or from the Settings page inside Billably.
  • We never sell, share, or use your Gmail data for advertising or any purpose other than sending reminder emails on your behalf.

Billably's use of Gmail APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

5. Data sharing

We do not sell your personal data. We share data only with the following service providers who help us operate Billably:

  • Supabase: Database and authentication hosting.
  • Stripe: Payment processing.
  • Google: OAuth authentication and Gmail sending (when you connect your account).
  • Vercel: Application hosting and infrastructure.

Each provider is bound by their own privacy policies and data processing agreements.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or billing purposes.

7. Your rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Revoke Gmail access at any time without affecting your Billably account
  • Export your invoice and client data

To exercise any of these rights, email us at support@billably.net.

8. Security

We take security seriously. Gmail tokens are encrypted at rest using AES-256-GCM. All data is transmitted over HTTPS. Access to production data is strictly limited. That said, no system is perfectly secure — if you discover a vulnerability, please email us at support@billably.net.

9. Children

Billably is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has created an account, please contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or by showing a notice in the app before the change takes effect. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

If you have any questions about this privacy policy or how we handle your data, please contact us at support@billably.net.

Google API Limited Use Disclosure

Billably's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Gmail access to send emails on your behalf — nothing else.