Privacy Policy

This policy explains how VORA GLOBAL PTY LTD (ABN 62 700 397 324), trading as Billie (“Billie”, “we”, “us”), handles personal information when you use our website and invoicing service (the “Service”). We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Depending on how you use the Service, we collect:

• Account information — your name, email address and password (stored in hashed form).
• Business profile information — your business name, ABN, GST registration status, contact details and, if you choose to add them, bank account details (BSB and account number) to display on your invoices.
• Client information you enter — your clients' names, email addresses, phone numbers, addresses and billing preferences.
• Document data — the invoices, quotes and purchase orders you create, including line items, amounts and payment status.
• Payment and subscription data — handled by our payment provider, Stripe. We store references such as your Stripe customer and connected-account identifiers and your subscription status; we never see or store full card numbers.
• Technical data — log and usage information generated when you use the Service, such as IP address and browser type, used for security and troubleshooting.

We collect information directly from you when you register, complete your profile and use the Service; automatically through your use of the Service; and from third parties such as Stripe (for example, the status of your payment account or a payment made against one of your invoices).

We collect, hold and use personal information to:

• provide the Service — including generating your documents as PDFs, emailing them to your clients at your direction, processing subscription payments and enabling card payments on your invoices;
• operate, secure, maintain and improve the Service;
• provide support and communicate with you about the Service;
• comply with our legal obligations.

We do not sell personal information, and we do not use your clients' contact details for our own marketing.

Direct marketing — we may occasionally email you product updates and offers about the Service. You can opt out at any time using the unsubscribe link in those messages or by contacting us, and we will stop. We will still send you essential service and account messages (such as billing notices, security alerts and legal updates), which are not marketing and cannot be opted out of while you hold an account.

We disclose personal information to service providers who help us run the Service, strictly for the purposes described above:

• Supabase — database, authentication and storage infrastructure;
• Stripe — subscription billing and card payments (including Stripe connected accounts);
• Resend — email delivery of the documents you send;
• Vercel — application hosting.

We may also disclose personal information where required or authorised by law.

Our service providers may store or process information on infrastructure located outside Australia, including in the United States. Where personal information is disclosed overseas, we take reasonable steps to ensure the recipient handles it in a manner consistent with the APPs.

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure — including encryption in transit, hashed passwords, and row-level access controls so that each account can only access its own data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

When you enter information about your clients, you are responsible for ensuring you are entitled to provide it to us and for complying with any privacy obligations you have to them. We process that information only to provide the Service to you — for example, addressing and emailing an invoice to your client at your direction.

The Service keeps you signed in using session information stored in your browser's local storage. Our hosting and payment providers may set strictly necessary cookies for security and fraud prevention. We do not use advertising or cross-site tracking cookies.

We retain personal information while your account is active. If your subscription ends, your data remains available to view and export for 12 months; we email you before it is removed, and re-subscribing within that window restores full access. You can delete your account at any time from the settings page, which removes your account data from the Service immediately. Some information may persist for a limited period in backups, and we may retain information where we are legally required to (for example, our own transaction and billing records). The ATO asks businesses to keep their records for 5 years — longer than we hold them for. Export anything you still need before that date.

Most of your information can be viewed and corrected directly in the app (your profile, clients and documents). You may also contact us to request access to, or correction of, the personal information we hold about you, and we will respond within a reasonable period. If we refuse a request we will explain why.

If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

If you have a privacy concern or complaint, contact us first at support@trybillie.io and we will investigate and respond within a reasonable period. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

We may update this policy from time to time. The current version will always be available at this page, with its “Last updated” date shown above. Material changes will be notified in the app or by email.

Privacy questions and requests can be sent to support@trybillie.io. See also our Terms of Service.