Privacy Policy
The free invoice generator sends nothing you type to us. If you create a Billsato Pro account, we store your account and the invoices you save in it, in the EU, to run the service for you.
Last updated: October 2026 · Version 2026-10
1. Who we are
Aranzolm Technologies LLC
30 N Gould St, Ste N
Sheridan, WY 82801
United States
For anything in this policy, write to info@billsato.com.
2. The free invoice generator
We do not collect the contents of invoices you make on the free page. Your business details, your client's name and address, line items, amounts and tax IDs are processed on your own device and are never sent to us.
So that a refresh does not cost you your work, your browser's local storage keeps:
billsato.guest.v1— the invoice, your details and any clients you addedbillsato.theme— whether you chose light or darkbillsato.carryoverandbillsato.carryover.payment— only if you choose to save your invoice to Billsato Pro, so it can be brought into your new account
This stays in your browser. Clearing your site data for billsato.com deletes it.
3. Billsato Pro: two roles
- We are the controller of data about you as our customer: your account, login, billing and how you use the service.
- We are a processor for the data you put into your invoices — for example your clients' names, addresses, emails and tax IDs. You decide what goes in; we process it only to provide the service to you, under our Data Processing Agreement. If you are one of our customers' clients, contact the business that invoiced you about your data.
4. What Billsato Pro collects, why, and for how long
| Data | Why | Legal basis (GDPR) | Kept for |
|---|---|---|---|
| Email, password (stored only as an Argon2id hash), country | Create and run your account; we don't serve every country | Contract | Until you delete your account |
| Your Google account ID and email, if you sign in with Google | Let you log in with Google | Contract | Until you delete your account |
| Business details, logo, payment details, clients, invoices, stored invoice PDFs and payments you record | The service itself | Contract (as processor for your clients' data) | Until you delete them or your account; issued invoices can't be deleted separately |
| Which versions of the Terms, Privacy Policy and DPA you accepted, when, and from which IP address | Prove agreement | Legal obligation; legitimate interest | Until you delete your account |
| Login sessions (IP address and browser), an activity log of account actions with IP addresses, and two-factor data (secrets stored encrypted) | Keep your account and the service secure | Legitimate interest | Sessions: 30 days. Activity log: until you delete your account |
| Subscription records from Stripe (status, period, customer ID; never card numbers) | Give you the plan you paid for | Contract; legal obligation | As tax law requires |
| Your email, business name and country when you finish setting up | Our team is notified of new accounts | Legitimate interest | As long as needed to support you |
We send you emails the service needs: confirming your email address, password resets, security alerts (for example when payment details change or Google sign-in is added), a reminder before your trial ends, and confirmation when your account is deleted. We don't send marketing email. Billsato never sends invoices to your clients; you download them and send them yourself.
We do not sell personal data, and we do not use your invoice data for advertising or to train AI models.
5. Who we share it with
A small number of providers run parts of Billsato for us. They are listed, with what each does and where, on our Subprocessors page.
Payments. Stripe processes Billsato Pro payments. Your card details go directly to Stripe and never reach us. Stripe also uses payment data for its own fraud prevention and legal obligations, as described in Stripe's privacy policy.
Google sign-in. If you choose "Continue with Google", Google tells us your Google account ID and email address under Google's privacy policy.
We may also disclose data where the law requires it, or to protect our rights or someone's safety, and to a buyer if our business is sold (you will be told).
6. Analytics and fonts
Our website, including the Billsato Pro app, loads Google Tag Manager and Google Analytics to measure visits and how pages are used. They set cookies and receive your IP address and usage data, but never the contents of your invoices. A consent choice for these cookies is being added. The site also loads Google Fonts, which receives your IP address when a font is fetched. Both are governed by Google's privacy policy.
Billsato Pro sets one cookie of its own, which keeps you logged in. It is needed for the service to work.
7. Where data is stored and international transfers
Billsato Pro data is stored in the EU, in Amsterdam, the Netherlands, with DigitalOcean. Aranzolm Technologies LLC is a US company and some providers are in the US. Where personal data from the EEA, UK or Switzerland is accessed from or sent to the US, we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum), or on the EU–US Data Privacy Framework where the provider is certified.
8. Deleting your data
The account owner can delete the account at any time in Settings. That immediately deletes the account and everything in it — clients, drafts, issued invoices, stored PDFs and payment records. Download what you need first: tax law may require you to keep your invoices for years. We keep subscription records only where tax law requires.
9. Your rights
Depending on where you live, you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to send it to another provider. You can export everything and delete your account yourself in Settings. For anything else, write to info@billsato.com; we answer within one month. You can also complain to your data protection authority — in the EU, the authority in your country; in the UK, the ICO.
If you live in a US state with a consumer privacy law (for example California), you have similar rights to know, correct and delete your data. We do not sell or share personal data for cross-context behavioral advertising.
10. Security
We protect data with encryption in transit, strict separation between accounts and optional two-factor authentication. More detail is in Annex II of our Data Processing Agreement. If a breach affects your personal data, we will tell you and the relevant authorities as the law requires.
11. Children
Billsato is a business tool and is not directed at anyone under 16.
12. Changes
We will update this page and the date above when this policy changes, and email Billsato Pro customers about material changes before they take effect.