Privacy Policy

Last updated: 2026-07-05

Introduction

At Rightstuff Innovations GmbH, we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our Billy application.

By using Billy, you consent to the data practices described in this policy. We may update this policy periodically, and we encourage you to review it regularly.

Information We Collect

We collect several types of information to provide and improve our service to you:

• Personal information: Email address, name, and contact details you provide when creating an account or using our services.
• Usage data: Information on how you interact with Billy, including features used, time spent, and actions taken.
• Cookies and similar technologies: Data stored on your device to remember your preferences and improve your experience.
• Business information: Company details, client information, and financial data you enter when creating documents.

How We Use Your Information

We use the collected information for various purposes, including:

• To provide and maintain our service, including processing transactions and sending notifications about your account.
• To improve and personalize your experience with Billy based on your preferences and usage patterns.
• To communicate with you about updates, security alerts, and support messages.
• To comply with legal obligations and enforce our terms of service.

Cookies and Tracking

Billy uses essential cookies required to run the application (e.g. sign-in/session, security). These are always active.

Marketing technologies (e.g. Meta or TikTok pixels) are loaded only after your explicit consent via our cookie banner. You can withdraw or adjust your consent at any time via “Cookie settings” in the footer.

• Essential cookies: Required for core features such as sign-in, session management and security. Always active.
• Marketing: Advertising pixels (e.g. Meta, TikTok) used to measure our ad campaigns. Only with your consent.

Third-Party Services

Billy uses the following third-party services to facilitate various aspects of our application:

• Supabase: Supabase (database hosting, authentication, storage): processes personal data as a processor under its own privacy policy.
• Stripe: Stripe (payment processing): your payment details are processed directly by Stripe under Stripe’s privacy policy.
• Resend: Resend (transactional email, e.g. sending invoices): processes email addresses and message content on our behalf.
• Sentry: Sentry (error monitoring): processes technical error data (e.g. stack traces, truncated IP addresses) so we can fix bugs.
• Railway: Railway (application hosting): runs the server infrastructure Billy operates on.

Data Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Data Protection Rights

Under data protection laws, you have rights in relation to your personal data that include the rights to:

• Request access to your personal data.
• Request correction of any incomplete or inaccurate data about you.
• Request erasure of your personal data under certain conditions.
• Request restriction of processing of your personal data.
• Request the transfer of your personal data to you or a third party.
• Object to processing of your personal data for certain purposes.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the 'last updated' date.

Controller and Contact

The controller within the meaning of the GDPR is Rightstuff Innovations GmbH, Trenkwaldgasse 43, 1170 Vienna, Austria. For data-protection requests (access, rectification, erasure, portability, objection) please contact us by email — we answer requests within the statutory deadlines.