Privacy Policy

Last updated: March 3, 2026

BillSweep ("we", "our", "us") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use it, and your rights under Canadian privacy law (PIPEDA).

1. Information We Collect

Information you provide

Data	Purpose
Email address	Account creation, login, notifications, and password recovery
Password	Account authentication (stored as a salted hash — we never store plain text passwords)
Display name	Personalization (optional)
Financial data (accounts, payments, bills)	Core functionality — tracking your finances
Uploaded statements	AI parsing to extract transactions (files are processed and not retained)

Information collected automatically

• Usage data: Pages visited, features used, and session information to improve the Service
• Device information: Browser type, operating system, and screen size for responsive design

Information from third parties

• Stripe: When you subscribe to Pro, Stripe processes your payment. We receive your Stripe customer ID and subscription status but never your credit card number, CVV, or full card details.

2. How We Use Your Information

• To provide and maintain the Service
• To process subscription payments via Stripe
• To send you payment reminders and account notifications (if enabled)
• To send email verification and password reset links
• To improve and optimize the Service

3. What We Do NOT Do

• ❌ We do not sell your personal or financial data to third parties
• ❌ We do not share your data with advertisers
• ❌ We do not use your financial data for profiling, marketing, or analytics beyond the Service
• ❌ We do not store your credit card information

4. Data Storage and Security

Your data is stored on secure servers. We use industry-standard security measures including:

• Encrypted passwords (bcrypt hashing with salt)
• HTTPS encryption for all data in transit
• JWT-based authentication with expiring tokens
• PCI-compliant payment processing via Stripe (we never touch card data)

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data and financial records will be permanently removed from our systems within 30 days.

Uploaded statement files are processed in real-time and are not stored after transaction extraction is complete.

6. Your Rights

Under PIPEDA (Canada's Personal Information Protection and Electronic Documents Act), you have the right to:

• Access your personal information held by BillSweep
• Correct inaccurate personal information
• Delete your account and all associated data
• Withdraw consent for optional communications (e.g., email reminders)

To exercise any of these rights, contact us at support@billsweep.com.

7. Cookies

BillSweep uses essential cookies only — specifically, a JWT token stored in your browser's local storage for authentication. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

8. Third-Party Services

We use the following third-party services:

• Stripe — for secure payment processing (Stripe Privacy Policy)

9. Children's Privacy

BillSweep is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice within the Service. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact Us

If you have questions or concerns about this Privacy Policy or your personal data, please contact:

BillSweep
Email: support@billsweep.com