Privacy Policy

Last updated 29 July 2026

Short version: we keep what the app needs to make your invoices work, we do not sell it, and you can have it deleted by writing to [email protected]. Bill To is operated by FatMachines LLC.

What we collect

Your business details — name, logo, address, phone, tax number, and your payment instructions.
Your clients — the names, emails, phone numbers and addresses you enter or import from your contacts.
Your invoices — line items, totals, notes, attachments, and the rendered PDF.
Your account — your email address if you sign in, and a random identifier for the app installation if you do not.
Invoice activity — when an invoice link is opened, signed or paid, so we can tell you.
Diagnostics — crash reports, basic usage events, app version, device model and OS version.
Anything you send us — the message and contact address you type on the Help screen.

Contacts you import are read on your device only when you pick someone, and only the client you picked is saved. We never upload your address book.

Why we collect it

To create, store, render and deliver your invoices — the service you asked for.
To sync your work between your devices and restore it after a reinstall.
To notify you when an invoice is opened, signed or paid. You can turn each of these off in Profile › Notifications.
To find and fix crashes and problems.
To answer you when you contact us.

We do not sell your data, and we do not use your invoices or your clients for advertising.

Who it is shared with

Only the services that make the app work:

Amazon Web Services — hosting, and storage for logos, attachments and PDFs.
Google Firebase — sign-in, push notifications, crash reporting and analytics.
Mailgun — sending your invoice emails and your sign-in codes.
Stripe and PayPal — card and PayPal payments, through the accounts you connect. They handle card details; we never see or store them.
KIE — only when you ask the app to remove the background from a logo you uploaded.

We also share information when the law requires it, or to protect the service and its users from fraud or abuse.

Who can see an invoice

An invoice link contains a long random token, and anyone holding the link can view, download, sign and pay that invoice without signing in. That is what lets your client use it. We do not index those pages or list them anywhere. Only send a link to people who should see the invoice.

How long we keep it

Your invoices and clients are kept while your account exists, because a business needs its records. Crash and analytics data is kept for up to 14 months. When you ask us to delete your account we remove your businesses, clients, invoices and uploaded files, and we keep only what we must for tax and fraud-prevention purposes.

Your choices

Notifications — each type can be turned off in Profile › Notifications, and all of them in your device settings.
Access, correction and deletion — email [email protected] and we will action it. Depending on where you live, this is a right you hold under the GDPR, the UK GDPR, the CCPA or your local law.
Working offline — the app works without an account. What you make stays on your device until it syncs.

Security

Traffic is encrypted in transit. Each installation holds a credential we issue once and can revoke, rather than a password. Uploaded files are stored privately and served through signed or unguessable URLs. No system is perfect, so tell us immediately if you think something is wrong.

Children

Bill To is a business tool and is not intended for anyone under 13.

International transfers

Our servers and the services above operate in the United States, the European Union and India. Using Bill To means your information may be processed in those places under appropriate safeguards.

Changes

If this policy changes, the date at the top changes with it, and we will say so in the app when the change is significant.

Contact

FatMachines LLC — [email protected]