Privacy Policy

Billaroo provides simple invoicing and bookkeeping software for Australian sole traders and small businesses. This policy explains what personal information we collect, why, how we protect it, and the choices you have. We handle personal information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).

What we collect

We only collect what the service needs to work:

• Your account: your email address and a securely hashed password.
• Your business details: business name, ABN, GST registration status, and optional contact details and logo that appear on your invoices.
• Your records: the customers, suppliers, invoices, quotes, expenses and bank-statement data you enter or upload to run your books.
• Security information: if you turn on two-factor authentication, we store the secret needed to verify your codes — encrypted at rest.
• Basic technical logs: such as the IP address of sign-in and key account events, kept as a security audit trail.

We never ask for or store Tax File Numbers (TFNs). Billaroo is free to use, so we don't ask for or store any payment or card details.

How we use it

We use your information to provide the service — creating and emailing invoices, tracking expenses, reconciling bank statements, producing GST/BAS figures and reports, and giving you exports for your accountant. We use your email to send service-related messages (for example, a security or account notice). We use security logs to protect your account. We do not sell your personal information, and we do not use your business records for advertising.

Advertising

Billaroo is free to use and supported by advertising rather than subscriptions. To keep that consistent with the rest of this policy:

• Ads appear only on our public pages — such as the home page, pricing page and guides — and never inside your bookkeeping workspace.
• The ads are contextual: chosen to suit the page, not you. We do not use your account, your business records or behavioural tracking to target them, and we don't build an advertising profile of you.
• We don't sell your personal information to advertisers. You're not the product.

We serve these ads ourselves. They're curated placements we book directly with advertisers, shown as ordinary images and links — there's no third-party ad network, no ad script and no tracking cookies. If you click an ad, you simply follow a link to the advertiser's own site, the same as any other link on the web.

Who we share it with

We share personal information only with the service providers we need to run Billaroo, under agreements that require them to protect it:

• Cloudflare — hosting, database and file storage.
• Resend — sending the invoice and account emails you ask us to send.

We don't share your information with advertisers. Ads on our public pages are served by us directly (see Advertising above), so no advertising network receives your account or business records.

Some of these providers may store or process data on servers outside Australia. We otherwise disclose personal information only where the law requires it.

How we protect it

Security is built in, not bolted on. Each business's data is isolated from every other business. Passwords are hashed, sensitive fields are encrypted at rest, and two-factor authentication is available. Traffic is encrypted in transit. No system is perfectly secure, but we take reasonable steps to protect your information and are ready to notify you and the regulator if a data breach ever creates a real risk of harm.

How long we keep it

We keep your records for as long as your account is active, so your books stay complete. Raw bank-statement files you upload are automatically deleted from our storage once an import has been reconciled and is no longer needed — the reconciled transactions remain in your books. If you close your account, we delete your data, including uploaded files. Please export anything you want to keep first.

Accessing and correcting your information

You can view and edit most of your information directly in the app at any time, and export it whenever you like — there is no lock-in. If you would like access to, or correction of, any personal information we hold that isn't available in the app, contact us and we'll help.

Complaints

If you have a privacy concern, please contact us first and we'll do our best to resolve it. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Changes to this policy

We may update this policy from time to time. When we do, we'll change the "last updated" date above and, for significant changes, let you know in the app or by email.

Contact us

Questions about privacy? Email privacy@billaroo.net.