Privacy Policy

Last updated: April 6, 2026

1. Introduction

At SendBill.net, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our invoicing and billing platform. We are committed to being transparent about our data practices and giving you control over your personal information.

By using SendBill.net, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

Account Data

When you register for an account, we collect information necessary to create and manage your profile:

• Full name and business name
• Email address
• Phone number (optional, used for OTP verification features)
• Password (stored in encrypted form; we never have access to your plain-text password)
• Business address and tax identification numbers you choose to provide
• Company logo and branding assets you upload

Billing Data

To provide our invoicing and billing services, we process certain financial and transactional data:

• Invoice and estimate details you create, including line items, amounts, and payment terms
• Client information you store in the platform, such as client names, email addresses, and billing addresses
• Payment transaction records and statuses
• Subscription plan details and payment history for your SendBill.net account
• Currency preferences and payment gateway configuration

Usage Analytics

We automatically collect certain technical information when you interact with the Service:

• Browser type, version, and operating system
• IP address and approximate geographic location
• Pages visited, features used, and time spent on the platform
• Referring website or source that led you to our platform
• Device type and screen resolution
• Error logs and performance metrics to help us improve the Service

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Service, including generating invoices, estimates, and managing client records
• To process your subscription payments and manage your account
• To send you transactional communications such as invoice notifications, payment confirmations, and account alerts
• To respond to your inquiries, support requests, and feedback
• To improve and optimize the Service based on usage patterns and user feedback
• To detect, prevent, and address fraud, security issues, and technical problems
• To comply with legal obligations and enforce our Terms of Service
• To send you optional marketing communications about new features, product updates, and promotional offers (you can opt out at any time)

4. Data Storage & Security

We implement industry-standard security measures to protect your data from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of sensitive data at rest, including passwords and payment information
• Regular security audits and vulnerability assessments
• Access controls that limit employee access to personal data on a need-to-know basis
• Automated backups and disaster recovery procedures

Self-Hosted Data Sovereignty: For businesses that choose our self-hosted deployment option, your data remains entirely on your own infrastructure. In this scenario, you are the sole data controller and are responsible for implementing appropriate security measures, backup procedures, and compliance with local data protection regulations. We do not access, store, or process any data from self-hosted installations unless you explicitly request technical support.

5. Third-Party Services

We integrate with third-party service providers to deliver certain features of the platform. These providers may have access to limited portions of your data as necessary to perform their functions:

Payment Processors

When you or your clients make payments through the platform, the transaction is processed by third-party payment gateways such as Stripe, PayPal, JazzCash, Easypaisa, or PayPak. These processors handle payment card information directly and are governed by their own privacy policies and PCI-DSS compliance standards. We do not store complete credit card numbers on our servers.

SMS Providers

If you use the OTP verification feature, we transmit phone numbers and verification codes through SMS providers such as Twilio, Branded SMS, or Veevo Tech. These providers process the data solely for the purpose of delivering SMS messages and are bound by their own privacy and data protection policies.

6. Cookies & Tracking

We use cookies and similar tracking technologies to enhance your experience on the platform:

• Essential Cookies: Required for the Service to function properly, including session management, authentication, and security tokens. These cannot be disabled.
• Preference Cookies: Store your settings and preferences, such as your chosen theme (light/dark mode), language, and currency display preferences.
• Analytics Cookies: Help us understand how users interact with the Service, which pages are most visited, and where users encounter difficulties. This data is aggregated and anonymized where possible.

You can control cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Service.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you at any time through your account settings or by contacting us
• Right to Correction: You can update or correct inaccurate personal information directly in your account settings, or request that we make corrections on your behalf
• Right to Deletion: You can request that we delete your personal data and account. We will comply with such requests except where we are required to retain data for legal or regulatory reasons
• Right to Data Export: You can export your invoices, client data, and other business information in standard formats for portability to another service
• Right to Object: You can object to the processing of your personal data for marketing purposes at any time
• Right to Restrict Processing: In certain circumstances, you can request that we limit how we process your personal data

To exercise any of these rights, please contact us through our Contact page. We will respond to your request within 30 days.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Service. If you close your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain certain information for legal compliance, dispute resolution, or enforcement of our agreements.

Transactional data such as invoices and payment records may be retained for longer periods as required by tax and financial reporting regulations in your jurisdiction. Aggregated and anonymized data that cannot be used to identify you may be retained indefinitely for analytics and service improvement purposes.

9. Children's Privacy

SendBill.net is designed for business use and is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a child under 18, we will take immediate steps to delete that information from our systems. If you believe a child has provided us with personal information, please contact us immediately.

10. International Data Transfers

SendBill.net serves users globally, including but not limited to the United States, European Union, United Kingdom, Canada, Australia, Pakistan, India, and the Middle East. If you access the Service from outside the country where our servers are located, your data may be transferred to, stored, and processed in a different jurisdiction. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

We take appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy when transferred internationally, including the use of standard contractual clauses and other legally recognized transfer mechanisms.

For users in the European Economic Area (EEA) and United Kingdom: We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR). Where we transfer your personal data outside the EEA or UK, we rely on recognized legal mechanisms such as Standard Contractual Clauses (SCCs) approved by the European Commission, or adequacy decisions where applicable. You have the right to request a copy of the safeguards in place by contacting us.

For users in Pakistan and South Asia: SendBill.net integrates with local payment gateways including JazzCash, Easypaisa, and PayPak. Payment credentials and transaction data processed through these gateways are handled in accordance with the State Bank of Pakistan regulations and local data protection guidelines. Your payment information transmitted to these providers is encrypted and processed within their respective infrastructure. We do not store your full payment card or mobile wallet credentials on our servers.

For users in North America: We comply with applicable privacy laws in the United States and Canada, including the California Consumer Privacy Act (CCPA) where applicable. If you are a California resident, you have the right to know what personal data we collect, request deletion, and opt out of the sale of your data. We do not sell personal data to third parties.

For self-hosted deployments: Users who deploy the self-hosted version of SendBill.net retain full control over where their data is stored and processed. Your data remains in the jurisdiction and infrastructure of your choosing, giving you complete autonomy over international data transfer considerations, regulatory compliance, and data sovereignty.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and may provide additional notification through email or an in-app announcement.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Your continued use of the Service after any changes to this policy constitutes your acceptance of the updated terms.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to reach out to us. You can contact our privacy team through our Contact page. We are committed to addressing your privacy-related inquiries promptly and thoroughly.