Privacy Policy

Information We Collect

We may collect the following types of information:

Personal Information

This includes information you voluntarily provide, such as your name, email address, phone number, and any other details submitted when you sign up, contact us, or use our services.

Usage and Device Information

We may collect information about how you interact with the Platform, including IP address, browser type, device information, operating system, usage logs, and pages or features accessed.

Uploaded Content

If you upload documents or other files, we may process information contained within them to provide our services.

Information Collected from Authorized Sources

With your explicit consent, we may collect or retrieve information on your behalf from sources that you authorize, such as your email account, messages, device storage, or other linked sources.

This information may be used solely to provide and operate the Platform’s functionality. We access such sources only to the extent permitted by you and do not access or collect information without your authorization.

You may revoke such access at any time through your device settings or account controls, subject to applicable limitations.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Platform
• Improve and enhance our services and user experience
• Communicate with you, including responding to inquiries and sending service-related updates
• Monitor usage and analyze trends to improve our offerings
• Comply with legal and regulatory obligations

Sharing of Information

We do not sell your personal information.

We may share information in the following circumstances:

• With service providers who assist us in operating the Platform, subject to confidentiality obligations
• When required by law, regulation, or legal process
• To protect the rights, property, or safety of BillBxa, its users, or others

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law or for legitimate business purposes.

Security

We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, or alteration. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Your Rights

You may request access to, correction of, or deletion of your personal information by contacting us at support@billbxa.com. We will respond to such requests in accordance with applicable laws.

Account closure, deletion, and deactivation

Last updated: 6 April 2026

This section describes how you may delete or deactivate your BillBxa account, what happens to your information, and situations where we may need to retain certain data.

1. How to request account deletion or deactivation

To delete or deactivate your account, you must use the controls inside the BillBxa app:

• Go to Support & Help.
• Open FAQ.
• Select the FAQ entry about account deletion.
• On that screen you will see options to delete your account and to deactivate your account.

If you choose account deletion, you will need to verify your request with a one-time password (OTP) (or another verification method we show in the app) sent to your registered contact details, before the request can proceed.

Deactivation is offered on the same screen and is intended for users who wish to temporarily suspend access to BillBxa rather than permanently delete their account.

We may update the exact labels or layout of these screens from time to time; please follow the instructions shown in the version of the app you are using.

2. What happens when your account is deleted

Subject to Section 4 below, when we complete account deletion, we will delete or irreversibly disassociate personal information that is not required to be retained for legal, regulatory, security, or legitimate business purposes described in this Policy.

This may include, depending on what applies to your account:

• Profile and account details (such as name, contact details, and preferences you have provided).
• Bill, document, and file records associated with your account, including metadata and processing outputs linked to your documents, where technically and legally permissible.
• Connected services and integrations, such as email / mailbox connections, WhatsApp linkage, bills@ / forwarding configuration, and OAuth-connected sessions (for example Google or Microsoft) used for your account, where applicable.
• Referral and invite information tied to your account (for example codes or links associated with you), where permissible.
• Chartered Accountant (CA) connection and delivery records that identify you as a BillBxa user, where permissible.
• Organisation or workspace membership linked to your user profile, where applicable.

After deletion is completed, you will not be able to sign in to the deleted account or recover the same account data through the app in the ordinary course.

3. Account deactivation (temporary suspension)

If you request deactivation, we will restrict access to your BillBxa account until reactivation in line with our processes. Deactivation is not the same as deletion: some information may remain stored so the account can be restored when you request reactivation and complete any verification we require.

To reactivate a deactivated account, contact us at support@billbxa.com or through the in-app support channel specified in the BillBxa app, and follow the instructions we provide.

4. When deletion or full erasure may be delayed or limited

We may not be able to complete account deletion immediately, or we may need to retain certain information, if:

• There is an ongoing dispute, investigation, legal matter, or regulatory request involving your account.
• We reasonably suspect fraud, abuse, security risk, or need to preserve evidence for enforcement or cooperation with lawful authority.
• Applicable law, regulation, court order, or government request requires retention.
• We must retain limited records for tax, accounting, audit, or other compliance obligations.
• There are contractual obligations that require retention for a defined period.

Where deletion is delayed for these reasons, we will complete deletion or disassociation of personal data (that is not required to be retained) promptly after the issue is resolved, unless a longer retention period is required by law.

Nothing in this section limits our right to retain aggregated or de-identified information that does not identify you, where permitted.

5. Contact

For questions about this section or account closure:

Children’s Privacy

Our Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. Continued use of the Platform after such changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions or concerns regarding this Privacy Policy, please contact us at: