Privacy Policy

Last updated: July 2026

MyBillDash ("we", "us", "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights in relation to it.

1. Information We Collect

Account information: When you register we collect your name, email address, country, and password (stored as a one-way hash).

Business profile: Business name, address, phone number, website, bank account details (for display on your invoices only), logo, and branding preferences you choose to provide.

Invoice and client data: Invoices, quotes, credit notes, and client records you create are stored securely and used solely to provide the service to you.

Payment information: We do not store your card details. Payments are processed by Stripe and PayPal. We receive only a subscription status and customer reference from these providers.

Usage data: We may collect basic usage information (pages visited, features used) to improve the product. We do not sell this data.

2. How We Use Your Information

• To provide and maintain the MyBillDash service
• To send you transactional emails (invoices, payment receipts, account notifications)
• To process your subscription payments via Stripe or PayPal
• To respond to support requests
• To improve the product through aggregated, anonymised analytics
• To display relevant advertising on free accounts (via Google AdSense)

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Third-Party Services

We use the following third-party services to operate MyBillDash:

• Stripe — subscription billing and payment processing
• PayPal — alternative payment processing
• Resend — transactional email delivery
• Cloudinary — logo and image storage
• Fly.io — cloud hosting and infrastructure
• Google AdSense — advertising shown on free accounts

Each provider operates under their own privacy policy. We encourage you to review them.

4. Data Retention

Your data is retained for as long as your account is active. If you close your account, your data will be deleted within 30 days, except where we are required by law to retain it longer.

5. Data Security

All data is transmitted over HTTPS. Passwords are hashed using Django's default PBKDF2 algorithm. Sensitive secrets (API keys, payment credentials) are stored as encrypted environment variables, never in source code.

6. Cookies

We use a session cookie to keep you logged in, and a CSRF cookie for security. We do not use tracking cookies for advertising beyond what Google AdSense sets on free accounts.

7. Your Rights

Depending on your location you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and data
• Object to or restrict certain processing
• Port your data to another service

To exercise any of these rights, email us at privacy@mybilldash.com.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or a notice in the app. Continued use of the service after changes constitutes acceptance of the updated policy.

9. Contact

If you have questions about this policy or how we handle your data, contact us at privacy@mybilldash.com.