Privacy policy
This covers the billbale waitlist: what we keep when you reserve a spot, why, for how long, and how to have it deleted.
Who keeps your details
HEXELITY LABS S.R.L., registered in Bucharest, Romania, which makes billbale. Write to hello@billbale.com about anything on this page, and a person answers.
What we keep
Your work email, company name and team size, and the accounting software and time tracker if you tell us. We also keep when you reserved and when you confirmed your email.
Why we keep it, and on what basis
We use it to hold your spot, to email you about the beta, and to choose which accounting sync ships first. We keep it because you agreed to when you reserved (GDPR Article 6(1)(a)), and you can withdraw that at any time with the link in our emails.
Who else sees it
Resend sends our emails, so it handles your email address for us. Cloudflare sits in front of our website and app and passes every request on to our server, so it sees your IP address and what you send us. Hetzner Online GmbH runs the servers, in Germany, that store your details and our backups of them. PostHog counts visits, as the last section explains. Resend and Cloudflare are US companies, so your details may go to the US. Both have joined the EU-US Data Privacy Framework, which the EU recognises as keeping them protected there. We never sell your details or share them for anyone else's marketing.
How long we keep it
If you don't confirm your email, we delete your reservation once its link stops working, 7 days after we send it. If you do, we keep your details until 90 days after the beta opens, then delete them unless you've started a trial. Our nightly backups keep a copy of deleted details for up to 14 days, then that copy is gone too.
Your rights
You can ask to see your details, correct them, have them deleted, limit how we use them, or get a copy. The cancel link in every email deletes them straight away. If you think we've got something wrong, you can complain to ANSPDCP, Romania's data protection authority.
Counting visits
We count page visits and button presses with PostHog, hosted in the EU, without cookies or local storage. It never gets what you type into the form. Like any server, it sees your IP address when your browser sends it a count, and we have it throw the address away.