Privacy Policy

1. What we collect

• Your email address, and password if you sign up that way instead of via Google.
• The bills you upload, scan, or forward — the original document/image, and the text, translation, summary, and structured details (amount, due date, provider, account number, and similar) extracted from it.
• Messages you send in per-bill or general chat, and the assistant's replies.
• If you set up email forwarding: the alias you choose, the senders you approve or block, and metadata about forwarded messages (sender, subject, whether it had an attachment) — not the full body of every email, only what's needed to let you review and decide.
• Basic account activity: when you signed up, when you last signed in.

2. How we use it

Primarily to provide the Service to you: extracting and translating bill content, answering your questions, showing your bill history, and sending the account/relay emails you've asked for. We don't sell your data, and we don't use your bill content to train any AI model.

We also produce internal, aggregated research on utility costs and consumption trends — for example, comparing typical spending by category or region over time. This uses a separate, restricted dataset that never includes your name, account number, the bill's original text, translation, or summary, or the original document itself; each household is represented only by a one-way, non-reversible code, not your account. Any given comparison is only produced when enough households share it that no single home's data stands out on its own — if too few households match, nothing is generated for that comparison at all.

3. Who else sees it

We use a small number of subprocessors to run the Service, each only for its specific job:

• Anthropic — processes bill images/documents and chat messages to produce the OCR, translation, summary, and chat replies.
• Supabase — hosts our database and authentication; this is where your account and bill data is stored.
• Resend — sends account-related emails and, if you use email forwarding, receives and relays forwarded bill emails.

We don't share your data with anyone else, except where required by law.

4. Security

Data is encrypted in transit and at rest using our infrastructure providers' standard encryption, and access is restricted at the database level so your data is only ever readable by your own account (row-level security) — plus a small number of administrators who can access account/billing data for support and abuse-prevention purposes. We don't currently use per-document end-to-end encryption; that's on our roadmap as the Service grows.

5. How long we keep it

We keep your data for as long as your account is active. Deleting a bill in the app is a real, permanent deletion, not a hidden flag — it's gone. Deleting your account removes your profile, bills, chat history, and forwarding settings; you can request this at any time.

6. Your rights

You can access, correct, or delete your data at any time from within the app, or by emailing us. If you're in a jurisdiction with additional statutory privacy rights (for example under GDPR or similar law), those rights apply to you as well — contact us and we'll act on the request.

7. International transfers

Our subprocessors operate internationally, so your data may be processed outside the country you live in, including in Israel and the United States. We rely on our subprocessors' own security and compliance commitments for this.

8. Changes to this Policy

If we make a material change to this Policy, we'll make a reasonable effort to notify you before it takes effect.

9. Contact

Questions or requests about your data can be sent to admin@billtov.com.