Last updated: 8 October 2026

Privacy Policy

1. Who we are

Bill Sorted is an Australian software business that provides recurring bill, reminder, document, and record-keeping software to households in Australia, New Zealand, the United States, and Canada. When this policy says "we", "us", or "Bill Sorted", it means Bill Sorted as the operator of the service.

2. What personal information we collect

We collect personal information that is reasonably necessary to operate Bill Sorted, including:

  • Account information — such as your email address, display name, login details, and workspace membership details.
  • Bill and record information — such as properties, bills, documents, payment records, notes, tax-treatment selections, and related recurring-expense data you add to the service.
  • Shared-access information — such as invitation email addresses, member roles, and workspace access records for family members or accountants.
  • Billing information — such as your selected package, subscription status, Stripe customer ID, Stripe subscription ID, billing interval, and renewal status. We do not store full payment card details ourselves.
  • Preference and support information — such as reminder settings, app preferences, and information you provide when contacting support.
  • Technical and usage information — such as authentication events, app pages and features used, import and onboarding stages, subscription-funnel events, session information, normalized error codes, and service-operation information needed for security, troubleshooting, reliability, and product improvement. Product analytics do not include bill names, transaction descriptions, exact bill amounts, uploaded CSV contents, or document contents.

3. How we collect personal information

We generally collect personal information directly from you when you:

  • create an account or sign in
  • set up a workspace, property, bill, reminder, payment, or document
  • invite another person to a workspace
  • start or manage a subscription
  • contact us for support

We may also receive limited information from service providers that help us operate the platform, such as Stripe for subscription status and payment events.

4. Why we collect, hold, use, and disclose personal information

We collect, hold, use, and disclose personal information to:

  • operate and deliver the Bill Sorted service
  • authenticate users and manage secure access to workspaces
  • store, display, and organise bills, documents, reminders, payments, and related records
  • send reminder emails and service communications
  • provide subscription billing and billing support
  • respond to support requests and account enquiries
  • maintain security, investigate misuse, diagnose errors, and improve reliability
  • understand where users complete or leave onboarding, imports, and subscription flows so we can improve the product
  • comply with legal obligations and enforce our terms

We do not sell your personal information or disclose it to third parties for their own direct marketing purposes.

5. Who we disclose personal information to

We may disclose personal information to the following categories of recipients where reasonably necessary to operate the service:

  • Infrastructure and storage providers — including Supabase for authentication, database, and file storage services, and Vercel for website and app hosting.
  • Email providers — including Resend for sign-in, reminder, and service emails.
  • Analytics providers — including Google Analytics and Microsoft Clarity on our website, used to understand how pages are used. Clarity is not used in the iPhone app.
  • Payment and billing providers — including Stripe for subscription billing, payment processing, billing portal access, and subscription status events.
  • Professional advisers and service providers — where reasonably necessary for legal, accounting, security, or operational support.
  • Other users you authorise — such as family members or accountants you invite into a shared workspace.
  • Authorities or regulators — where required or authorised by law.

6. Data storage, security, and overseas disclosure

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. Bill Sorted uses technical and organisational safeguards including authenticated access controls and encryption in transit.

Your account and bill records are stored with Supabase in Japan (Tokyo region). Some of our other service providers process information in the United States: Stripe (billing), Vercel (hosting), Resend (email), Google Analytics, and Microsoft Clarity. This means your information is stored and processed outside your home country, mainly in Japan and the United States. We take reasonable steps to ensure these providers protect personal information consistently with this policy and applicable privacy laws.

If a data breach occurs that is likely to cause serious harm, we will assess and respond in line with applicable privacy laws, including notifying affected users and regulators where required.

7. Access, correction, export, and deletion requests

You can request access to personal information we hold about you, ask us to correct inaccurate information, request export assistance for certain records, or request account deletion.

Some information can be updated directly inside the product. For other requests, contact us using the details below. We may need to verify your identity before actioning a request, and some requests may be limited by law, security, or operational requirements.

  • Access — request a copy of the personal information we hold about you.
  • Correction — request correction of inaccurate, out-of-date, incomplete, irrelevant, or misleading information.
  • Export — export certain bill and EOFY records from within the product, or contact us if you need additional help.
  • Deletion — request closure of your account and deletion of associated data, subject to legal and operational retention requirements.

8. Data retention

We retain personal information for as long as reasonably necessary to operate the service, maintain security and backups, resolve disputes, comply with legal obligations, and support legitimate business records. Detailed first-party product-usage events are retained for up to 180 days. When information is no longer required, we will take reasonable steps to delete or de-identify it, subject to legal or operational retention requirements.

9. Cookies and similar technologies

We use essential browser storage, cookies, and similar technologies to keep you signed in, maintain secure sessions, remember app preferences, measure product usage, and support core product functionality. Google Analytics receives aggregate event names and privacy-safe parameters; identifiable customer journeys remain in Bill Sorted's first-party Supabase environment. We do not currently use advertising cookies.

10. Privacy complaints

If you believe we have breached your privacy, you can send a complaint to us using the contact details below. Please include enough detail for us to understand the issue and investigate it properly.

We will review the complaint, may ask for further information, and aim to respond within a reasonable period. If you are not satisfied with our response, you may be able to complain to your local privacy regulator: the Office of the Australian Information Commissioner, the New Zealand Office of the Privacy Commissioner, the Office of the Privacy Commissioner of Canada, or your state regulator in the United States.

11. Information for users outside Australia

New Zealand. Under the Privacy Act 2020 you can ask to access and correct your personal information. Your information is stored outside New Zealand, mainly in Japan and the United States, with providers we require to protect it consistently with this policy.

Canada. Under PIPEDA and applicable provincial laws you can ask to access and correct your personal information and withdraw consent, subject to legal and contractual limits. Your information is stored outside Canada and may be accessible to courts and authorities in those countries. Our privacy contact is listed below.

United States. We collect the categories of information listed in section 2 for the purposes in section 4. We do not sell personal information, share it for cross-context behavioural advertising, or use sensitive personal information to infer characteristics about you. Depending on your state, you may have the right to know what we collect, request access, correction, or deletion, and opt out of sale or sharing. We will not discriminate against you for exercising these rights. You or an authorised agent can make a request using the contact details below, and we will verify your identity first.

Bill Sorted is not directed to children, and accounts are only available to people aged 18 or older.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will publish the updated version on this page and change the last updated date. If a change is material, we may also notify users through the service or by email.

13. Contact

For privacy-related questions, requests, or complaints, contact us at legal@billsorted.com.au. We aim to respond within 2 business days.