Privacy Policy

SiriusBill ("SiriusBill," "we," "us," or "our") provides online invoicing and payment-related tools for businesses and freelancers. This Privacy Policy describes how we collect, use, store, and share information when you use siriusbill.com, our web application, and related services (the "Services").

This document is a general notice for product and design purposes. It is not legal advice. Before offering paid memberships or processing real customer funds at scale, SiriusBill should obtain review from qualified counsel and update this policy accordingly.

This policy applies to visitors of our marketing pages, users who create accounts (including guest, customer, and admin roles), merchants who create and send invoices, and people who open a payment link to pay an invoice (invoicees), whether or not they create a SiriusBill account.

Account information: name, email address, password (stored as a secure hash, not as plain text), role, and optional profile details.

Business / workspace information: account or business name, branding materials you upload (such as logos), contact details, tax identifiers if you provide them, and settings related to invoicing.

Invoice and payment-related data: invoice contents (line items, amounts, parties, dates, status), payment status, public pay tokens, and records needed to show history and receipts.

Technical data: IP address, browser type, device information, approximate location derived from IP, log data, cookies or similar technologies, and diagnostic information.

Communications: messages you send us (support, email) and related metadata.

Payment processing data: where payments settle using network rails, we may process account identifiers, transaction identifiers, and amounts necessary to register, settle, or record a payment.

Provide, operate, and improve the Services (accounts, invoices, pay links, dashboards, admin tools).

Authenticate users, secure accounts, and prevent fraud or abuse.

Process and record invoice payments and related platform fees according to your plan.

Send transactional messages (e.g., security notices, payment receipts, product notices you request).

Comply with law, enforce terms, and protect rights, safety, and integrity of the Services.

Analyze aggregated or de-identified usage to understand product performance (where permitted).

Depending on your location, we may process personal data based on: performance of a contract (providing the Services you request); legitimate interests (security, improvement, fraud prevention) balanced against your rights; consent where required (e.g., certain cookies or marketing); and legal obligations.

Service providers: hosting, databases, email delivery, analytics, error monitoring, payment or on-ramp/off-ramp partners, and similar processors who act on our instructions.

Payment processors: payment instructions and related data may be processed via payment infrastructure providers as needed to complete a payment you or your client initiate.

Business transfers: if we are involved in a merger, acquisition, or asset sale, information may be transferred under appropriate protections.

Legal requirements: we may disclose information if required by law, regulation, legal process, or governmental request, or to protect rights and safety.

With your direction: e.g., when you send an invoice or pay link to a client, that client receives the invoice details you choose to include.

We do not sell your personal information as “sell” is commonly understood for money-for-data brokerage. If a jurisdiction defines “sale” or “sharing” more broadly (e.g., certain advertising technologies), we will update this policy and required notices before enabling such practices.

We retain information for as long as needed to provide the Services, comply with legal and accounting obligations, resolve disputes, and enforce agreements. Invoice and payment records may be kept for extended periods because they are business and financial records. You may request deletion subject to legal retention requirements and technical limits (including data we are legally required to keep).

We use administrative, technical, and organizational measures designed to protect information, including encryption in transit (HTTPS), hashed passwords, access controls, and least-privilege practices for operators. No method of transmission or storage is 100% secure. You are responsible for safeguarding your credentials and for access you grant within your workspace.

If we offer advanced account security features, access keys are handled under our security design (encryption at rest, restricted access, audit of sensitive actions).

Depending on where you live, you may have rights to access, correct, delete, or export personal data, object to or restrict certain processing, and withdraw consent where processing is consent-based. To exercise rights, contact us using the details below. We may need to verify your request.

You may update certain account profile fields in the product when logged in. You may stop using the Services and request account closure, subject to outstanding legal or contractual obligations.

The Services are not directed to children under 16 (or the age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, contact us and we will take appropriate steps to delete it.

We may process and store information in the United States and other countries where we or our providers operate. Those locations may have different data-protection laws than your home country. Where required, we will use appropriate transfer mechanisms.

We use cookies and similar technologies for authentication (session cookies), security, preferences, and—if enabled later—analytics. You can control cookies through browser settings; disabling certain cookies may affect login or core features.

We may update this Privacy Policy from time to time. We will post the updated version with a revised effective date. Material changes may be communicated by email or in-product notice when appropriate.

Questions about this Privacy Policy or our privacy practices: privacy@siriusbill.com (placeholder — update to a monitored address before launch).

Postal contact and company legal entity details should be added when SiriusBill’s operating entity is finalized.