Privacy Policy

Last updated: 10 July 2026

Plain-language summary: we collect what's needed to run billed for you — your account details and the business data you enter. We don't sell your data or use it for advertising. Payments are handled by Stripe (we never see your card). You can export your data at any time, and request full account deletion by emailing support.

1. Who we are

billed (billed.au) is operated by MAJO INDUSTRIES PTY LTD (ACN 658 191 176, ABN 76 658 191 176), Australia. We handle personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth). Contact: support@billed.au.

2. What we collect

Account information: your login email, password (stored as a secure hash — we can't read it), and optionally a profile photo and phone number.
Business data you enter: your business details (name, ABN, address, bank details shown on invoices), and your records — clients, invoices, quotes, products, expenses, receipt photos, time entries, bookings and logbook trips. This may include personal information about your clients; you're responsible for having the right to store it.
Billing information: your subscription status and Stripe identifiers. Card details go directly to Stripe and are never stored by billed.
Technical basics: standard logs needed to run and secure the service (e.g. authentication events). We do not use advertising trackers or advertising cookies.

3. How we use it

To provide billed: storing your records, generating your documents and reports, syncing across your devices.
To bill subscriptions, send transactional service emails (signup confirmation, password reset, receipts) and respond to support requests. We may also occasionally send product updates about billed; you can opt out of these at any time via the unsubscribe link in those emails.
To keep the service secure and improve it. We do not sell personal information or use your business data for advertising.

4. AI-assisted features

When you use receipt scanning or document import, the image or file you provide is sent to Google's AI services (Gemini) to extract the details, and the result is returned to your account. We only send what's needed for the feature you triggered. We don't use your data to train AI models, and we use provider configurations intended to ensure our AI providers don't use it to train theirs.

5. Who processes your data

We use a small set of reputable providers to run billed:

Supabase — database, authentication and file storage (your records and receipt photos).
Stripe — subscription payments and billing portal.
Resend — transactional email delivery (e.g. password resets), sent from billed.au.
Netlify — hosting of the application.
Google — address lookup/route distance for the logbook, and Gemini for AI-assisted scanning (section 4). Data is sent to Google only when you use these features.

Your billed records and receipt photos are stored with Supabase in Australia (Sydney region). Some providers process data overseas — Stripe (payments), Resend (email delivery) and Google (address lookup and AI scanning) operate primarily from the United States, and may be subject to the laws of the countries in which they operate. Where personal information is transferred overseas, we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles, including through the providers' contractual and security commitments.

6. Security

Your data is transmitted over encrypted connections (HTTPS) and stored with per-account isolation designed to prevent one account from accessing another's records. Access to production systems is restricted to authorised personnel who need it to operate and support the service. No system is perfectly secure, so we also make it easy for you to keep your own exports.

7. Your data, your controls

Export anytime: billed includes one-click exports of your clients, invoices, quotes, expenses, time entries and receipt photos — free, including after your subscription ends.
Delete: you can permanently delete your business records in-app (Settings → Danger zone). To delete your entire account, contact support@billed.au — we'll begin the deletion process within a reasonable period; some information may be retained where required by law or until backup rotation completes (see Retention below).
Access and correction: you can view and edit your information in the app at any time, or contact support@billed.au to make an access or correction request under the Privacy Act.

8. Retention

We keep your data while your account exists so the service works for you (including if your subscription lapses, so you can still export). After account deletion, data is removed from production systems promptly and from backups in the ordinary backup cycle. We may retain minimal records where required by law (e.g. tax and transaction records).

9. Cookies and local storage

billed uses only what's needed to keep you signed in and make the app work offline (authentication tokens and a local copy of your data on your own device). No third-party advertising cookies.

10. Changes and complaints

We'll update this policy as billed evolves and note the date above; material changes will be flagged in the app or by email. If you have a privacy concern, contact support@billed.au — we'll acknowledge it promptly and work with you to resolve it within a reasonable period. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC).