Privacy Policy
Last updated: May 2026 · Effective immediately
1. Who we are
This notice is issued by BillSlash ("BillSlash", "we", "us"), provider of the BillSlash platform. BillSlash is the data controller for personal data processed about you in connection with your account and use of the service. Payments are processed by Stripe, which acts as a separate controller for cardholder and billing data — see Stripe's privacy notice.
2. Categories of personal data we collect
Account data (name, email, company, role, login credentials), customer support messages, project and CRM data you upload, usage and telemetry data (pages viewed, features used, error logs), device identifiers and IP address, and authentication tokens for integrations you connect.
3. Why we process it (purposes & legal bases)
• Create and operate your account — performance of our contract with you.• Provide the service, run AI features on your behalf, and store your project data — performance of our contract.• Security, abuse and fraud prevention, audit logs — our legitimate interest in keeping the service safe.• Customer support — performance of our contract / legitimate interest.• Product improvement and aggregate analytics — legitimate interest.• Marketing email about BillSlash — consent, withdrawable at any time.• Legal and tax obligations — compliance with legal obligations.
4. Who we share data with
Categories of recipients: (a) infrastructure and hosting subprocessors (cloud hosting, database, file storage); (b) product analytics and error monitoring tooling; (c) AI model providers (used under zero-retention enterprise terms — your prompts and outputs are not used to train their models); (d) Stripe, our payment processor, for checkout, subscription management, payments, invoicing, and tax calculation; (e) Plaid, when you connect a financial institution, to facilitate account verification and transaction data access; (f) professional advisers (legal, accounting); and (g) authorities where required by law. We do not sell your personal data.
5. Plaid financial data
When you connect a bank account via Plaid, you are also subject to Plaid's privacy practices. Plaid collects and uses your financial account and transaction data in accordance with its own policies. You can review Plaid's practices at the Plaid End User Privacy Policy. BillSlash receives only the data necessary to run your financial workflows (e.g., cash-flow dashboards, automated reconciliation). We do not store your banking credentials — Plaid access tokens are encrypted at rest using pgsodium AEAD.
6. International transfers
Some recipients may be located outside your country, including in the US and the EU/UK. Where data leaves the UK/EEA we rely on appropriate safeguards such as the EU Standard Contractual Clauses and the UK IDTA, or transfers to recipients in jurisdictions covered by an adequacy decision.
7. Retention
We keep account and project data for as long as your account is active and for a reasonable period afterwards to comply with legal, tax, and audit obligations. Billing records held by Stripe are retained per Stripe's policy. Financial connection metadata is retained per our Data Retention & Deletion Policy. When data is no longer needed it is deleted or anonymised.
8. Your rights
Subject to local law you may: access your data, correct it, request deletion, restrict or object to processing, withdraw consent, and request portability. California residents: see our Do Not Sell or Share My Personal Information page. EU/UK residents may complain to their local supervisory authority. To exercise these rights, email privacy@billslash.app and we will respond within one month.
9. Security
Encryption in transit (TLS) and at rest, role-based access control, audit logging, environment isolation between customers, least-privilege service credentials, and regular vulnerability monitoring.
10. Cookies
We use essential cookies required to keep you signed in and secure the service, and limited analytics cookies to understand product usage. You can manage non-essential cookies in your browser settings. See our Cookie Policy for full details.
11. Contact
privacy@billslash.app