Privacy Policy

Billsnapp ("we," "our," or "us"), operated by Aizako Inc., is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered receipt capture and expense management application (the "Service").

By using Billsnapp, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, password, and business information when you create an account.
• Receipt Data: Images of receipts and invoices you upload or capture, including vendor names, dates, amounts, line items, and payment methods.
• Financial Account Connections: When you connect QuickBooks or other accounting software, we receive authorization tokens to sync your expense data.
• Communication Data: Information you provide when contacting our support team.

Website inquiries and acquisition attribution

When you submit an inquiry, we store your contact and business details, requested offer, message, contact preference and consent in our Supabase lead store so the BillSnapp team can respond. If email notification is configured, the inquiry is also sent to our team using Resend. Please do not submit client financial records, tax identifiers or credentials in this form. You can contact info@billsnapp.com about your inquiry or request deletion.

This website keeps first-touch attribution in session storage: the landing path, referring domain and limited campaign labels. This helps distinguish search, AI referrals and campaigns. We do not store full referring URLs or search queries in this attribution record. Attribution is attached when you submit an inquiry or use the chat. Your IP address may be stored for abuse prevention. When Vercel Web Analytics is enabled, it records aggregate page visits and referral, device and country information without analytics cookies. The website removes URL query strings and fragments before analytics events are sent and does not send form fields to analytics. If a session starts with a recognized AI referral or source tag, it also records one landing event containing only the channel label and a recognized source name, such as ChatGPT or Gemini. A session flag prevents repeat events; missing referral information remains unknown.

1.2 Information Collected Automatically

• Device Information: Device type, operating system, browser type, and unique device identifiers.
• Usage Data: How you interact with the Service, including features used, pages visited, and actions taken.
• Log Data: IP address, access times, and referring URLs.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process and extract data from your receipts using AI technology
• Sync your expense data with connected accounting software (e.g., QuickBooks)
• Categorize expenses and suggest accounting classifications
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and fraudulent activity

3. AI Processing and Data Analysis

Billsnapp uses artificial intelligence and machine learning technologies to:

• Extract text and data from receipt images (OCR)
• Identify vendors, amounts, dates, and line items
• Suggest expense categories and accounting codes
• Generate descriptions for expense entries

Your receipt data may be processed by third-party AI services. We ensure these providers maintain appropriate security and confidentiality standards. We do not use your individual receipt data to train AI models that would be shared with other customers.

4. QuickBooks Data and OAuth Tokens

When you connect your QuickBooks Online account to Billsnapp, we handle your QuickBooks data and authorization credentials with special care in accordance with Intuit's security requirements:

4.1 OAuth Token Security

• We store QuickBooks OAuth authorization tokens securely using industry-standard encryption at rest.
• We do not disclose, share, or expose Intuit OAuth tokens or QuickBooks customer-identifying information to any third parties, except vetted service providers acting on our behalf under contract who require access to operate the Service.
• Access tokens are refreshed automatically as needed and old tokens are securely deleted.

4.2 QuickBooks Data Usage

• We only access QuickBooks data necessary to provide the expense syncing functionality you have authorized.
• QuickBooks data is used solely to sync your expenses, retrieve account information for categorization, and provide the features you have requested.
• We do not access, read, or store QuickBooks data beyond what is required for the Service.

4.3 When You Disconnect QuickBooks

If you disconnect your QuickBooks account from Billsnapp or revoke our authorization:

• Immediate Actions: We immediately stop accessing your QuickBooks data and cease all syncing operations.
• Token Deletion: We delete your QuickBooks OAuth tokens and any stored credentials within seven (7) days of disconnection.
• Audit Trail: We may retain a minimal audit log (connection date, disconnection date, sync activity summary) for up to 90 days for troubleshooting and compliance purposes. This log does not contain your financial data.
• Data Already Synced: Expenses that were already posted to QuickBooks before disconnection will remain in your QuickBooks account according to Intuit's data retention policies. Billsnapp does not have the ability to remove data from QuickBooks after you disconnect.
• Billsnapp Data: Receipt images and expense records stored in Billsnapp remain in your account unless you request deletion or close your account.

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

5.1 No Selling or Sharing for Marketing

We want to be clear about what we do NOT do with your data:

• We do not sell your personal information, receipt data, or QuickBooks data.
• We do not share your data with third parties for their own marketing or commercial purposes.
• We do not use your data for advertising or to build marketing profiles.
• We do not provide your financial information to data brokers or advertisers.

5.2 With Your Consent

When you authorize connections to third-party services like QuickBooks, we share relevant expense data as necessary to provide the integration.

5.3 Service Providers (Subprocessors)

We work with carefully vetted third-party companies to operate our Service. These providers are contractually obligated to protect your information, maintain confidentiality, and use data only for the specific services they provide to us. Our service provider categories include:

• Cloud Hosting & Storage: Secure infrastructure for storing your data (e.g., Amazon Web Services, Google Cloud Platform)
• AI/OCR Processing: Receipt scanning and data extraction services (e.g., OpenAI, Google Cloud Vision)
• Payment Processing: Subscription billing and payment handling (e.g., Stripe)
• Analytics & Error Monitoring: Service improvement and crash reporting (e.g., Google Analytics, Sentry)
• Customer Support: Help desk and communication tools

All service providers are bound by data processing agreements that require them to protect your data in accordance with this Privacy Policy and applicable laws.

5.4 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Billsnapp, our users, or others.

5.5 Business Transfers

If Billsnapp is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your information.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure cloud infrastructure with access controls
• Regular security assessments and monitoring
• Employee access restrictions on a need-to-know basis

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. We may also retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

Receipt images and extracted data are retained for the duration of your subscription. Upon account deletion, we will delete your data within 30 days, except where retention is required by law or for legitimate business purposes.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to certain exceptions.
• Data Portability: Request a copy of your data in a structured, machine-readable format.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
• Object to Processing: Object to processing of your information in certain circumstances.

To exercise these rights, please contact us at privacy@billsnapp.com.

9. US State Privacy Rights

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, or other US states with comprehensive privacy laws, you may have additional rights:

9.1 Your Rights Under State Privacy Laws

• Right to Know: You can request information about the categories of personal information we collect, the purposes for collection, and the categories of third parties with whom we share information.
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You can request correction of inaccurate personal information.
• Right to Opt-Out: You can opt out of the sale or sharing of your personal information, and opt out of targeted advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

9.2 "Do Not Sell or Share My Personal Information"

We do not sell or share your personal information as those terms are defined under the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), or other applicable US state privacy laws. We do not sell your receipt data, QuickBooks data, or any financial information to third parties. We do not share your personal information with third parties for cross-context behavioral advertising.

9.3 How to Exercise Your Rights

To exercise any of your privacy rights, you may:

• Email us at privacy@billsnapp.com with your request
• Use the data export or deletion features in your account settings

We will respond to verifiable requests within 45 days (or as required by applicable law). We may need to verify your identity before processing your request.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. When we transfer your information internationally, we implement appropriate safeguards to protect your data, including standard contractual clauses approved by relevant authorities.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect usage information and improve the Service. You can control cookies through your browser settings, but disabling cookies may affect the functionality of the Service.

We use the following types of cookies:

• Essential Cookies: Required for the Service to function properly.
• Analytics Cookies: Help us understand how users interact with the Service.
• Preference Cookies: Remember your settings and preferences.

12. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

13. Third-Party Links

The Service may contain links to third-party websites or services, including QuickBooks and other accounting platforms. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: