Privacy Policy

1. Introduction

Clear Bill ("we", "us", or "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the Clear Bill website, web application, and related services (collectively, the "Service"). This policy is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

By using the Service, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

2. Information We Collect

We collect the following categories of information when you use the Service:

2.1 Account Information

When you create an account, we collect your name, email address, and password. If you subscribe to a paid plan, we collect billing information through our payment processor, Stripe. We do not directly store your credit card numbers on our servers.

2.2 Business Information

To provide the invoicing service, we collect information about your business, including your business name, address, tax registration numbers (such as your GST/HST number), and logo.

2.3 Invoice Data

We store the invoice data you create using the Service, including client names, addresses, invoice line items, amounts, tax calculations, payment status, and any notes or terms you include on your invoices.

2.4 Usage Analytics

We collect anonymized usage data to help us understand how users interact with the Service and to improve its functionality. This may include pages visited, features used, session duration, browser type, and device information. This data is collected in aggregate and is not linked to your personal identity.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide the Service: We use your account, business, and invoice data to operate the Service, generate invoices, calculate taxes, track payments, and deliver the core functionality you expect.
• To send transactional emails: We use your email address to send account-related communications such as registration confirmations, password resets, invoice delivery notifications, payment confirmations, and subscription updates.
• To improve the product: We use anonymized usage analytics to understand how users interact with the Service, identify areas for improvement, fix bugs, and develop new features.

We will not use your personal information for purposes other than those described in this Privacy Policy without your consent.

4. Data Storage

All user data is stored in Canada using Supabase's Canadian region infrastructure. Your data does not leave Canadian borders for primary storage. We employ industry-standard encryption for data in transit (TLS 1.2+) and at rest to protect your information.

5. Third-Party Services

We use the following third-party service providers to operate the Service. Each provider has been selected with data privacy in mind:

• Supabase— Database hosting and authentication. Data is stored in Supabase's Canadian region.
• Stripe — Payment processing. Stripe handles your payment information directly and is PCI DSS Level 1 compliant. We do not store your full credit card details.
• Brevo — Transactional email delivery. We share your email address with Brevo to send account-related and invoice notification emails.
• Vercel — Web application hosting and content delivery.

These third parties are contractually obligated to protect your data and may only use it for the specific purposes for which we share it. We recommend reviewing their respective privacy policies for more information.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you request deletion of your account, we will delete your personal data within 30 days of your request, except where we are required by law to retain certain records (such as financial transaction records for tax reporting purposes).

To request account deletion, contact us at support@clearbill.ca.

7. Your Rights

Under PIPEDA and applicable provincial legislation, you have the following rights regarding your personal information:

• Access: You have the right to request access to the personal information we hold about you. You can access most of your data directly through your account settings.
• Correction: You have the right to request correction of any inaccurate or incomplete personal information we hold about you. You can update most information directly in your account settings.
• Deletion: You have the right to request deletion of your personal information. Upon receiving a verified deletion request, we will delete your data within 30 days, subject to any legal retention requirements.

To exercise any of these rights, please contact us at support@clearbill.ca. We will respond to your request within 30 days.

8. Cookies

Clear Bill uses minimal cookies that are strictly necessary for the operation of the Service. We use session cookies to manage your authentication state and keep you logged in. We do not use advertising cookies, tracking cookies, or any third-party cookies for marketing purposes.

9. Data Sharing

We do not sell, rent, or trade your personal information to third parties. We will never monetize your data or share it with advertisers. We only share your information with the third-party service providers listed in Section 5, and only to the extent necessary to operate the Service.

We may disclose your personal information if required to do so by law, or if we believe in good faith that such action is necessary to comply with a legal obligation, protect our rights or property, or ensure the safety of our users.

10. Children

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child under 18 has provided us with personal information, please contact us at support@clearbill.ca.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you by email at the address associated with your account at least 30 days before the changes take effect. We encourage you to review this Privacy Policy periodically.

12. Contact

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at support@clearbill.ca.