Who we are
BillPad is operated by RS Foundations Pty Ltd, ABN 64 653 653 939, Victoria, Australia ("BillPad", "we"). Contact [email protected].
Using BillPad without an account
BillPad works without an account. Your invoices, quotes, clients, items, logo and settings are stored locally on your device, in browser storage or app storage. Without an account, we receive none of this workspace data.
Keep regular exports. Local data stays on your device until you clear it; losing the device or clearing app or browser storage can remove it.
Optional accounts and sync
You can sign in with Google, Sign in with Apple, or an emailed sign-in link. We store your email, name if Google or Apple provides it, provider account id and hashed session records.
We store your synced workspace data: invoices, quotes, clients, items and business profile. This lets you access your work across devices.
Sharing, reminders and payments
When signed in, you can share an invoice by link. We store a snapshot of that invoice and when it was sent, viewed or paid. Anyone you give the link to can view the shared invoice.
Optional email reminders to your clients are sent via Resend.
Optional “Pay now” links use your own connected Stripe account through Stripe Connect Standard. Stripe handles card payments. We store your connected account id and payment-link status, never card numbers.
Your customers’ information
For personal information you enter about your customers, you are the controller and we process that information on your behalf only to provide BillPad. You are responsible for having a lawful basis to enter and use it.
Consistent with GDPR Article 28, we process this data on your documented instructions through your use of the service, keep it confidential, use security measures, and use the service providers listed below to deliver the service. We help with requests concerning this data through export, correction and deletion, and delete it when your account is deleted. Contact us for help with data protection requests or processing arrangements.
Service providers and overseas processing
- Cloudflare: hosting, Workers and D1 database on its global network.
- Resend: transactional email, including sign-in links and invoice reminders.
- Stripe: invoice payments through your connected account.
- Google and Apple: optional sign-in.
- Apple App Store and Google Play: app distribution and, in future, in-app subscriptions.
- Paddle: web subscriptions when paid plans launch.
Data may be processed outside Australia, including in the USA, EU and Japan. We use these providers only as needed to operate the service.
Security and cookies
We keep short-lived records of IP addresses for rate limiting and sign-in links. Cloudflare also keeps security logs to protect the service from abuse.
We use one strictly necessary session cookie on app.bill-pad.com when you sign in, and local storage for your own data. We have no analytics, advertising or tracking cookies. We do not sell personal information or “share” it as defined by the CCPA. See our Cookies Policy.
Retention and deletion
We keep account data until you delete your account. Deleting your account removes it from our live database immediately and from backups within 30 days. Locally stored data stays on your device until you clear it.
See Delete account for instructions, including how to request deletion if you cannot sign in.
Your privacy rights
Under the Australian Privacy Act 1988 and Australian Privacy Principles (APPs), you can request access to or correction of your personal information. Contact us with a concern; you may also complain to the Office of the Australian Information Commissioner (OAIC).
Under the GDPR and UK GDPR, where applicable, you may request access, rectification, erasure, restriction, portability via Export, and object to processing. You may complain to your supervisory authority. Our lawful bases are contract to provide the service, legitimate interests to secure and operate it, and consent where we ask for it. You can withdraw consent by contacting us.
California and other applicable US state privacy laws give rights to know, delete and correct personal information, and to receive service without discrimination for exercising your rights. We do not sell or share personal information.
Use Export in the app for a copy of your workspace, or email [email protected]. We respond to rights requests within 30 days. We may need to verify that the account is yours.
Children
BillPad is not directed at children under 16.
Changes to this policy
We post updates here and notify signed-in users of material changes by email.