Privacy Policy

1. General

The Privacy Policy, as amended or otherwise changed from time to time (the “Privacy Policy” or “Policy”), explains the manner in which Bill EU, 40203335349, Latvia, Aluksne, Darza 8, LV-4301 (hereinafter “Get Bill” or the “Company”) maintains and discloses user information obtained through its mobile applications available on both iOS and Android platforms (collectively referred to as the “Application”). The terms “we”, “us”, and “our” refer to the Company. By using the Application, you (“User”) consent to the data practices prescribed in this Privacy Policy.

​

Your Personal Data is processed under this Privacy Policy and in accordance with applicable legislation, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), the UK General Data Protection Regulation (UK GDPR), Brazil’s Lei Geral de Proteção de Dados (LGPD), Australia’s Privacy Act, India’s Digital Personal Data Protection Act (DPDPA), South Korea’s Personal Information Protection Act (PIPA), and other applicable data protection laws (“Data Protection Law”).

​

On occasion, the company may revise the Privacy Policy to reflect changes in the law, our personal data collection and use practices, the features on the Application, or advances in technology. If material changes are made to this Privacy Policy, the changes will be prominently posted on the Application.

​

What if I do not want to accept this Privacy Policy?

​

By using the Application, you signify your acceptance of this Policy. If you do not agree to this Policy, please do not use our Application. Your continued use of the Application following the posting of changes to this Policy will be deemed as your acceptance to those changes.

​

In case you disclose any Personal Data regarding any third person (e.g. your employee or employer, your wife or husband, friends, relatives, children, etc.) to us, you are obliged to refer them to this Policy.

​

2. What information does the Company collect?

​

We may collect Personal Data from you such as: first and last name, e-mail address, product and service data from invoices and receipts, country of residence, bank account number, bank account transactions and bank account balance.
 

If you provide us feedback or contact us via e-mail, we will collect your name and e-mail address, as well as any other content included, in order to send you a reply. You can sign up to the Application using your Google account or Apple account, granting the necessary permissions for personal data collection.
 

Some information is collected automatically by our servers: These servers (which may be hosted by a third-party service provider) collect information from you, including your browser type, operating system, Internet Protocol ("IP") address, domain name, and/or a date/timestamp for your visit. As is true of most websites, we gather certain information automatically and store it in log files. This information includes IP addresses, browser type, Internet service provider ("ISP"), referring/exit pages, operating system, date/timestamp, and clickstream data. Like many online services, we use cookies to collect information. Cookies are small pieces of information that websites send to your computer's hard drive while you are viewing the website. We retain information on your behalf, such as transactional data and other session data linked to your account.
 

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data).
 

Bank account information synchronisation feature is provided by a third party provider GoCardless SAS, a limited liability company registered in France under registration number 834422180. GoCardless SAS is authorized to operate as an account information service provider and is regulated by the French financial supervisory authority, the Autorité de Contrôle Prudentiel et de Résolution (ACPR).
 

3. How does the Company use the information it collects?
 

In general, Personal Data you submit is necessary to ensure provision of our services and contacting you in the context of the delivery of products or services.
 

We also use your Personal Data for the following purposes:
 

• To display and categorize your transactions and purchase data within the Application.

• To facilitate the creation of your account and ensure its security.

• To enhance and personalize your experience when using the Application.

• To send a welcome email upon registration.

• To verify the ownership of the email address provided during account setup.

• To send administrative notifications, including updates about account activity, transaction processing, security alerts, customer support messages, and maintenance notices.

• To inform you of significant updates to our Terms and Conditions.

​

The extent of data processing by the Company depends on the features you choose to use. The company does not collect or store your credit card information. For the account synchronisation feature, your online banking credentials are not stored or used by the Company. 

​

4. Marketing and newsletter subscriptions.

We collect information about your behaviour within the application to offer you interesting information and offers regarding our services and products. This information includes your profile information and user status. We do not share this information with third parties. The processing of such personal data is based on our legitimate interest to develop and promote our services and products. If you have subscribed to our mailing list, we will send you information on our new activities, events, and products. We can also send special offers directed to a special user group, users in specific regions, etc. Adding you to our mailing list is based on your consent. You may also unsubscribe from the mailing list anytime by clicking the unsubscribe link at the bottom of each message.

​

5. Privacy Rights

European Union Privacy Rights (GDPR)

If you are a resident of the European Union, you are entitled to specific rights under the General Data Protection Regulation (GDPR), including:

• The right to access your personal data.

• The right to correct inaccurate or incomplete personal data.

• The right to erase your data (“right to be forgotten”).

• The right to restrict or object to processing of your data.

• The right to data portability.

• The right to withdraw consent at any time.

You also have the right to lodge a complaint with your local Data Protection Authority (DPA) if you believe your rights under GDPR have been violated.

​

California Consumer Privacy Act (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• The right to Know what personal information we collect, use, disclose, and sell.

• The right to Delete your personal information held by us.

• The right to Opt-Out of the sale or sharing of your personal information.

• The right to Non-Discrimination for exercising your privacy rights.

• The right to Correct inaccurate personal information.

• The right to Limit Use and Disclosure of Sensitive Personal Information.

To exercise any of these rights, please contact us at info@getbill.eu. We will verify your request using the information associated with your account, including email address. Government identification may be required.

We do not sell your personal information. 

​

Canadian Privacy Rights (PIPEDA)

If you are a resident of Canada, you are entitled to certain rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including:

• The right to know why we collect, use, or disclose your personal data.

• The right to access your personal information held by us.

• The right to request corrections to inaccurate or incomplete information.

• The right to withdraw your consent to the collection, use, or disclosure of your personal information.

You also have the right to be informed if your personal information is stored or processed outside of Canada. Your data may be processed and stored on secure servers in the European Union (e.g., Frankfurt, Germany) and appropriate safeguards are in place to ensure your data remains protected under PIPEDA standards.

To exercise any of these rights or for more information, please contact us at info@getbill.eu. We will respond to access requests and other inquiries in accordance with PIPEDA within the required timeframes.

​

United Kingdom Privacy Rights (UK GDPR)

If you are a resident of the United Kingdom, your rights are protected under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. These rights include:

• The right to be informed about the collection and use of your data.

• The right to access your data.

• The right to rectification and erasure of your data.

• The right to restrict or object to processing.

• The right to data portability.

• The right to not be subject to automated decision-making, including profiling.

For more information or to exercise your rights, contact us at info@getbill.eu

​

Brazilian Privacy Rights (LGPD)

If you are a resident of Brazil, you have rights under the Lei Geral de Proteção de Dados (LGPD), including:

• The right to confirm that we process your personal data.

• The right to access, correct, or delete your data.

• The right to anonymize, block, or delete unnecessary or excessive data.

• The right to data portability.

• The right to withdraw your consent at any time.

• The right to file a complaint with the Brazilian Data Protection Authority (ANPD).

Your personal data may be stored in secure servers located outside Brazil (e.g., the European Union), and appropriate safeguards are in place. To exercise your rights or make a complaint, please contact us at info@getbill.eu.

​

Australian Privacy Rights (Privacy Act 1988)

If you are a resident of Australia, your personal information is handled in accordance with the Privacy Act 1988 and the Australian Privacy Principles (APPs). Your rights include:

• The right to know why and how your data is collected.

• The right to access and correct your personal data.

• The right to opt out of marketing communications.

• The right to make a complaint if you believe your data has been mishandled.

To exercise your rights or make a complaint, please contact us at info@getbill.eu.

​

India Privacy Rights (DPDPA 2023)

If you are a resident of India, your personal data is protected under the Digital Personal Data Protection Act, 2023 (DPDPA). You are entitled to the following rights:

• The right to access your personal data held by us.

• The right to correct, complete, update, or erase your personal data.

• The right to withdraw consent at any time, where processing is based on consent.

• The right to be informed about how your data is processed and for what purposes.

• The right to nominate another person to exercise your rights in the event of death or incapacity.

We take appropriate measures to safeguard your personal data, including when it is stored or processed outside India.
For any requests or inquiries, please contact us at info@getbill.eu.

​

South Korea Privacy Rights (PIPA)

If you are a resident of South Korea, your personal data is protected under the Personal Information Protection Act (PIPA). Under this law, you have the right to:

• The right to request access to your personal data.

• The right to request correction or deletion of inaccurate or unnecessary data.

• The right to request suspension of data processing.

• The right to be notified of any third-party data transfers.

• The right to file a complaint with the Personal Information Protection Commission (PIPC) if you believe your rights have been violated.

​

Other countries & jurisdictions 

​​

We are committed to respecting and complying with data protection laws in all countries and jurisdictions where our services are offered. If your country or region has specific privacy rights or requirements not explicitly listed in this Privacy Policy, we will handle your personal data in accordance with applicable local laws. You may also have the right to access, correct, delete, or restrict the processing of your personal information, and to withdraw consent where applicable.

To inquire about your privacy rights or to exercise any applicable data-related requests, please contact us at info@getbill.eu. We will review and respond in line with relevant legal obligations.

​

​

7. Customer support

In case you need to contact our customer support, our support personnel will handle your contact information and the contents of your communication. Please do not share any sensitive data in your communication with our customer support. You can contact our customer support through various means. We’ll process the following contact details: e-mail address and message content. We keep a record of the contents of the support tickets to make sure that you receive quality service and to develop our products and services.

The processing of your personal data in connection with your communication with our customer service is based on the service agreement between you and the Company as well as our legitimate interest to follow up on the quality of our customer service, to verify the actions taken based on your request, and to develop our service in the future.
 

8. How does the Company share my Personal Data?

It may be necessary to disclose your information to comply with any law, court orders, or government request, defend against claims, investigate or bring legal action against illegal or suspected illegal activities, enforce our Terms, or protect the rights, safety, and security of the Company, our users, or the public.
 

We may share your Personal Data with third-party service providers to provide you with the services that we offer you through our Site. These third-party service providers are required not to use your Personal Data other than to provide the services requested by you. Other than as stated in this Privacy Policy, the Company does not disclose any of your personal information to third parties unless required to do so by law enforcement, court order, or in compliance with legal reporting obligations. All third-party service providers that we share your data with shall be requested to only process your data in accordance with instructions from us and comply fully with this Privacy Policy, any applicable data protection laws, and any other appropriate confidentiality and security measures.
 

We may also share your personal data with competent authorities when this is necessary to comply with a legal obligation, court order or similar legal order issued by an authorized authority. We may share some or all of your Personal Data in connection with or during negotiation of any merger, financing, acquisition or dissolution transaction or proceeding involving sale, transfer, divestiture, or disclosure of all or a portion of our business or assets. In the event of an insolvency, bankruptcy, or receivership, Personal Data may also be transferred as a business asset. If another company acquires our company, business, or assets, that company will possess the Personal Data collected by us and will assume the rights and obligations regarding your Personal Data as described in this Privacy Policy.
 

The Site may contain links to other third-party websites which are regulated by their own privacy policies. The Company is not responsible for the privacy policies of these third-party websites even if they were accessed using the links from our site.
 

9. How long do we store your personal data?

We keep the data you have provided to us on your user account for the whole period of your customer relationship and as long as it is necessary with regard to the purposes of the processing described above.
 

What legal rights do you have in relation to your information?
 

Under certain circumstances, you have the following rights under data protection laws in relation to your personal data: Request access to your personal data. Request correction of your personal data. Request erasure of your personal data. Object to processing of your personal data. Request restriction of processing your personal data. Request transfer of your personal data. Right to withdraw consent.
 

You also have the right to lodge a complaint with a Data Protection Authority (“DPA”) if you think that your Personal Data is being processed incorrectly or your rights have been violated by the Company.
 

You can withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent. Please note that in certain circumstances, it may be still lawful for us to continue processing your information even where you have withdrawn your consent if one of the other legal bases is applicable.
 

10. How to send requests regarding your information?

You can make a request regarding your information by emailing info@getbill.eu. Unless you have made a corresponding request, we will retain your information for as long as your account has not been closed or as needed to provide you access to your account. If you wish to close your account, you can do it by clicking on "Delete user" in Settings under Edit Profile by logging into your personal account. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our Terms.

​

11. Where do we store your personal data?

Your personal data may be stored or processed in jurisdictions outside your country of residence. Where such transfers occur, we ensure appropriate safeguards are in place to protect your data and comply with applicable legal requirements. The information we collect is primarily stored on secure Amazon Web Services (AWS) servers in Frankfurt, Germany. We will take all steps reasonably necessary to ensure that personal information is treated securely and in accordance with this Privacy Policy and that any third parties that we share your information with are bound to employ similar organisational and technical measures to ensure your information's security.
 

12. Security precautions taken by the company.
​

We take the protection of your personal information seriously. We use industry-standard data encryption technology and have implemented restrictions related to the storage of and the ability to access your personal information. However, despite all of our efforts, please note that no transmission over the Internet or method of electronic storage can be guaranteed to be 100% secure.

​

Contacting us
 

Where required by local law, we may provide this Privacy Policy in translated versions. In the event of any discrepancy between the translated version and the English version, the English version shall prevail. 
 

If you still have any questions about our Privacy Policy as outlined above, please contact us at info@getbill.eu