Privacy Policy
This Privacy Policy explains how Billee ("Billee", "we", "us", or "our") collects, uses, stores, discloses, and protects personal information when you use our website, mobile application, and related services.
Billee helps users find, organise, review, and pay bills. Some features depend on access to your Gmail or Microsoft mail account, with your permission, so Billee can detect bill-related emails and attachments and turn them into bill records in the app.
Information We Collect
Information You Provide
- Account details: Your name, phone number, email address, and profile information.
- Contact details: Information you provide when you join a waitlist, request support, or contact us.
- Bill details: Bills and related information that you add, edit, confirm, mark as paid, or otherwise manage in Billee.
- Payment-related information: Information needed to support bill payment features, where applicable.
- Support and feedback: Support messages, feedback, survey responses, and other communications you send to us.
Information We Collect Automatically
- Device information: Device type, operating system, app version, language, and region.
- Usage data: App events, feature usage, navigation, diagnostics, crash reports, and performance data.
- Log data: Approximate timestamps and technical logs used to operate, secure, and debug the service.
- Notification data: Push notification tokens and notification preferences if you enable notifications.
Google Account And Gmail Information
If you choose to connect Gmail, Billee asks Google for permission to access your Gmail account using OAuth. Billee currently requests basic Google account information, such as your email address and profile information, and Gmail read access using https://www.googleapis.com/auth/gmail.readonly.
The Gmail permission can technically allow Billee to view Gmail messages and settings. Billee uses this permission only to provide and improve visible Billee features, including searching for bill-related messages, reading relevant message metadata, message content, and attachments, and creating bill records in the app.
Depending on the email and attachment, the Gmail information Billee processes may include:
- sender, recipient, subject, date, message identifiers, thread identifiers, labels, snippets, and other email metadata;
- message body text where needed to decide whether an email is bill-related;
- bill attachments, such as PDF bills or invoice documents;
- information extracted from bills, such as biller name, amount, due date, account or customer references, payment details, and bill status; and
- operational status about Gmail sync, token health, reconnect requirements, and processing errors.
Billee does not use Gmail access to send emails, delete emails, change labels, modify mailbox settings, or permanently delete Gmail messages.
Microsoft Account And Mail Information
Microsoft mail features are currently restricted to approved preview users. If you choose to connect Outlook, Hotmail, or a Microsoft 365 work or school mailbox, you select the account and grant access in Microsoft's sign-in flow. Work or school accounts remain subject to their organisation's consent and access policies.
Billee requests basic sign-in and account information, permission to read your mail (Mail.Read), permission to identify the signed-in account (User.Read), and permission to maintain the connection when you are not actively using the app (offline_access). Billee does not request permission to send, delete, or modify Microsoft mail.
The initial bill import starts with the previous 30 days. Billee reads messages and supported PDF attachments in Inbox and ordinary received-mail folders, including an ordinary Archive folder within your primary mailbox. Drafts, Sent Items, Outbox, Junk, Deleted Items and their descendants, search folders, separate archive mailboxes, and delegated mailboxes are excluded. Billee may enumerate limited folder and message metadata outside the import window to maintain sync and identify coverage gaps.
Microsoft information processed by Billee may include:
- Microsoft account, tenant, and mailbox identifiers, your display name, and email address;
- folder and message identifiers, sender, recipients, subject, received time, and other message metadata;
- email text and supported PDF attachments used to identify and extract bill information;
- extracted biller names, amounts, dates, references, payment details, and bill or receipt status; and
- connection health, import coverage, sync progress, processing decisions, and diagnostics.
Each Microsoft connection is private to the Billee user who authorises it. Connecting the same Microsoft mailbox from another Billee account creates an independent connection; it does not share your credentials, evidence, or bill records with that user. Billee currently treats an invoice received through Gmail and Microsoft, or through two separate Microsoft connections, as separate bills.
How We Use Your Information
- To provide, operate, maintain, and secure Billee.
- To authenticate users and manage accounts.
- To connect Gmail or Microsoft mail when you ask us to do so.
- To search for bill-related emails and attachments.
- To extract and organise bill information in the app.
- To show upcoming bills, due dates, payment status, and bill history.
- To process or support bill payment features where available.
- To send account, security, service, and support communications.
- To provide customer support and troubleshoot issues.
- To detect, prevent, and respond to fraud, abuse, security incidents, and service errors.
- To analyse and improve reliability, performance, and user experience.
- To comply with legal obligations and enforce our terms.
Use Of Google User Data And Limited Use
Billee's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
For Google and Gmail data:
- We use Google user data only to provide or improve Billee features that are visible to users, such as Gmail connection, bill detection, bill extraction, bill display, reminders, sync status, and support for those features.
- We do not sell Google user data.
- We do not use Google user data for advertising, retargeting, personalised advertising, or interest-based advertising.
- We do not transfer Google user data to advertising platforms, data brokers, or information resellers.
- We do not use Google user data to determine credit-worthiness or for lending purposes.
- We do not use Google user data to train generalized artificial intelligence or machine learning models.
- We do not allow humans to read Gmail emails or attachments except where you give us affirmative permission for support or review of specific information, where needed for security or abuse investigation, where required by law, or where information has been aggregated for internal operations in accordance with applicable law.
Billee may use automated systems, including bill parsing and classification systems, to identify bill information from emails and attachments. These systems are used to provide Billee's user-facing bill management features and are not used to train generalized AI models.
Automated And AI Processing Of Connected Mail
Billee uses automated bill parsing and classification, including Google's AI processing services on Google Cloud, to identify bill-related messages and extract bill information. Email text, relevant message information, and supported PDF attachments from Gmail or Microsoft may be transmitted to these services for Billee's user-facing bill management features. Processing may occur outside Australia.
Billee does not use connected mail content or identifiers for advertising, retargeting, sale to data brokers, credit-worthiness or lending decisions, or training general-purpose AI models. Service providers processing this information for Billee must not use it for their own advertising, sale, unrelated purposes, or general-purpose model training.
Human access to Microsoft emails and attachments is limited to your affirmative permission for support or review of specific information, security or abuse investigations, legal requirements, or aggregated information for internal operations in accordance with applicable law.
Information Sharing
We do not sell, trade, or rent your personal information.
We may disclose information only as needed for the purposes described in this policy, including:
- to service providers that host, process, secure, monitor, analyse, or support Billee on our behalf;
- to payment, banking, or bill-payment service providers where needed for payment-related features you choose to use;
- to cloud, analytics, diagnostics, customer-support, security, and communications providers acting for Billee;
- to automated document-processing or AI-service providers acting for Billee to provide bill extraction and related user-facing features;
- to advertising and measurement platforms, in hashed or pseudonymised form, to measure the effectiveness of our advertising and to attribute sign-ups to the campaigns that led to them; this excludes connected Gmail and Microsoft mail content and identifiers;
- where you direct us to share information or give us consent;
- where required by law, regulation, court order, or government request;
- to protect rights, safety, security, and service integrity; and
- in connection with a merger, acquisition, financing, restructure, or sale of assets, subject to applicable law and any required consent.
Any service provider that processes Google or Microsoft user data for Billee must do so only to provide services to Billee and must not use that data for its own advertising, sale, or unrelated purposes.
Data Storage And Security
We use technical and organisational measures designed to protect personal information from unauthorised access, loss, misuse, alteration, or disclosure.
These measures may include encryption in transit, encryption at rest, access controls, logging, monitoring, separation of client and server permissions, and restricted backend access to sensitive credentials. Google and Microsoft OAuth refresh credentials are encrypted and held by Billee's backend. Stored refresh credentials are not made available to the Billee mobile app or other users after they are saved by our backend.
No method of transmission or storage is completely secure. We continue to review and improve our safeguards as the service develops.
Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law.
For connected-mail data:
- OAuth credentials are retained while your Gmail or Microsoft account remains connected, unless they expire, are revoked, are replaced, or are deleted.
- Bill records, extracted bill details, and related attachments may be retained while your account is active so Billee can show your bill history and provide the service.
- Gmail and Microsoft sync logs, coverage and status records, and diagnostics are retained as needed to operate, secure, troubleshoot, and improve the service.
- If you disconnect Gmail or a Microsoft connection, Billee stops using that connection's authorisation to access mail. Disconnecting does not automatically delete bill records or retained evidence already created in Billee. Account or data deletion uses Billee's existing deletion and retention processes.
Your Choices And Controls
You can choose whether to connect Gmail or Microsoft mail. Billee needs a connected mail account to automatically find bills in that mailbox.
You may be able to:
- disconnect or reconnect Gmail or an eligible Microsoft connection in the Billee app;
- revoke Billee's Google access through your Google Account permissions page, or Microsoft access through your Microsoft account or organisation's app-permission controls;
- update account or profile information in the app;
- delete bill records where the app provides deletion controls;
- opt out of non-essential communications where available; and
- request access, correction, deletion, restriction, objection, or portability of your personal information, subject to applicable law.
Revoking provider access may prevent future sync. Disconnecting in Billee does not necessarily remove the consent entry in your Google or Microsoft account; you can revoke that entry with the provider. Bill records and retained evidence already created in Billee may remain until you delete them or request deletion, subject to legal, security, and operational retention requirements.
Turning off the Microsoft developer preference hides new connection actions. It does not disconnect existing Microsoft connections or stop their imports. Existing bills, connection status, coverage warnings, and disconnect controls remain available.
Imported bills can appear while an import is unfinished. Billee keeps warnings visible when import work remains, coverage has known gaps, or import status cannot currently be verified. A connected account does not guarantee that every bill has been found.
To request deletion of your Billee account and associated data, use the in-app account deletion request or the instructions on our account deletion page.
International Processing
Billee is operated from Australia. We and our service providers may process and store information in Australia and other countries where our providers operate. Those countries may have privacy laws that differ from the laws in your location.
Children's Privacy
Billee is not intended for children under 13. We do not knowingly collect personal information from children under 13.
Changes To This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the date above and may provide additional notice in the app, on our website, or by other appropriate means.
If we change how Billee accesses, uses, stores, or shares Google or Microsoft user data in a way that is materially different from this policy, we will update this policy and obtain any required user consent before using that data for the new purpose.
Contact Us
- Email: [email protected]
By using Billee, you acknowledge that you have read and understood this Privacy Policy.