Privacy policy

Who is responsible

Appentium LLC publishes BillPigeon and is responsible for the personal data described here when you create an account and use the apps and the website.

When you invoice your own clients, the personal data of those clients is yours: you decide why it is used, and BillPigeon processes it for you under the data processing agreement.

What we process

• Your account: your email address, your name, how you sign in (email code, Google or Apple) and your devices.
• Your business: its name, address, tax details, bank details for invoices, logo and settings.
• Your clients, items and documents: names, addresses, email addresses and phone numbers you enter for clients, and every invoice, credit note, estimate and payment you create, with the PDF.
• Delivery: when a document is emailed, the email address it was sent to, whether it was delivered, bounced or opened by the link, and how often the hosted page was viewed.
• Push notifications: a device token, if you allow notifications.
• Your subscription: whether you have BillPigeon Pro, from which store, and until when. Card details never reach BillPigeon.
• Errors: technical details about a crash or a failed request, without the content of your documents.

Why we process it

• To provide the service you asked for: your account, your documents, sending them and keeping them in order (performance of the contract).
• To keep the service secure and working: limits on abuse, error monitoring, backups (our legitimate interest).
• To keep records we must keep, such as payment and subscription records (legal obligation).
• To send you notifications only if you allow them (your consent).

Where it is kept

The database and files are hosted in Germany. The companies that help us run BillPigeon are listed on the sub-processors page. Some of them may process limited data outside the EU under the safeguards the law requires.

How long we keep it

We keep your data while your account exists. Issued invoices are never deleted while the account exists, because the law in many countries requires you to keep them for several years: export your data before you delete your account and keep the copy for the period your country requires.

When you delete your account, your account, businesses, clients and documents, the files and your sign-in methods are deleted, and the subscription at our billing providers is cancelled. Encrypted backups hold the data for up to 30 days more and then expire. Records we must keep by law, such as that an account was deleted, stay as long as the law requires.

Your rights

You can export all your data in the app (More → Export my data) and delete your account in the app or on the account deletion page of this website. You can also ask us to correct your data, to restrict or object to its use, and you may complain to your data protection authority.

Write to support@billpigeon.com for any request.

Cookies, analytics and advertising

The website uses cookieless analytics and sets no cookies. The apps contain no advertising and no tracking of you across other apps or sites. See the cookie notice.

Your clients’ view of your documents

A document sent by link opens on billpigeon.com without an account. The link is a long random address that only the recipient has. The page is not indexed by search engines. A view is counted only when the page is opened in a browser that runs scripts, so a mail scanner that fetches the link does not count.

Changes

If we change this policy in a way that matters to you, we tell you in the app before the change applies.