Paisan AI, LLC (“we”, “us”) makes BillPaisan, billing software for businesses that bill for their time. This policy covers the website at billpaisan.com, the application at app.billpaisan.com, the invoice pages we host for our customers, and the email we send on their behalf.
Two kinds of information
Your account. When you sign up, we are responsible for the information about you: your name, email address and how you sign in.
Your business records. The clients, contacts, hours, invoices and payments you enter belong to your business. We store and process them to provide the service to you, on your instructions. We do not use them for anything else, and we do not sell them. This includes the people you bill: if you are one of our customers’ clients, your details are held on that customer’s behalf, and questions about them are best sent to the business that invoiced you. We will help them answer.
What we collect
- Account details: name, email address, and a password (stored only as a one-way hash) or your Google sign-in. With Google sign-in we receive your name, email address and profile picture from Google.
- Organization settings: business name, address, logo, payment terms, invoice numbering and email templates.
- Business records you enter: clients and their billing entities, contact names and email addresses, projects, tasks, time entries and their notes, invoices, and the payments recorded against them.
- Email sending settings: if you send from your own mail server, its host, port, username, password and sender address. The password is kept in an encrypted secrets vault, not in the ordinary database.
- Delivery records: who each invoice was sent to, when, and whether the send succeeded.
- Invoice link views: when someone opens an invoice link, we add one to that link’s view count and note the time. We do not record their IP address or device, and we set no cookie.
- Accounting connection: if you connect QuickBooks, the access credentials Intuit issues (encrypted, in the same vault) and your QuickBooks company ID. See below.
- AI assistant connections: if you connect an assistant over MCP, the registration and access tokens that let it act for you.
- Contact form: the name, email address and message you send us.
- Service logs: our hosting providers keep standard request logs, such as IP address, browser type and time, for security and reliability.
No tracking in the email we send
Invoice emails contain no tracking pixel and no rewritten links. We cannot tell whether an email was opened, and we do not try. The only “opened” figure we show is the invoice link view count described above, and it is counted on our own server when the invoice page loads.
How we use it
- To run the service: store your records, assemble and deliver your invoices, and sync with QuickBooks if you have connected it.
- To keep your account secure and the service reliable.
- To answer you when you contact us, and to tell you about changes that affect your account.
- To meet legal obligations.
We do not sell personal information, use it for advertising, or share it with data brokers. We do not use your business records to train AI models.
QuickBooks data
The QuickBooks connection is optional and does nothing until you turn it on. When connected, BillPaisan uses Intuit’s accounting permission only, and:
- reads your customer and product/service lists, so you can match them to your clients and services in BillPaisan;
- creates and voids invoices in QuickBooks that mirror the invoices you issue in BillPaisan;
- reads payments recorded against those invoices, so their balances in BillPaisan stay correct;
- reads company preferences, payment terms and your highest existing invoice number, so invoice numbers do not collide.
We use QuickBooks data only to provide these features to you. When you disconnect, from BillPaisan or from within QuickBooks, we revoke the credentials with Intuit and delete them from our vault. Invoices and payments already copied into BillPaisan remain part of your records.
Who processes data for us
We use a small number of service providers, each bound to protect the data and use it only to provide their service:
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, sign-in, file storage and server functions | United States (AWS us-east-1) |
| Cloudflare | Hosting for this website and the application | Global network |
| Resend | Email delivery, for accounts that have not configured their own mail server, and for our contact form | United States |
| Sign-in, if you choose “Continue with Google”; web fonts on this site | United States | |
| Intuit | QuickBooks sync, only if you connect it | United States |
We may also disclose information when the law requires it, to protect the rights and safety of our users or ourselves, or as part of a merger or sale of the business, in which case this policy continues to apply.
Cookies and browser storage
This website sets no cookies. Its pages load the Inter font from Google Fonts, which means your browser contacts Google’s servers.
The application uses your browser’s local storage for two things: your sign-in session, and view preferences such as the filters on your invoice list, stored under keys beginning billpaisan:. Signing out removes both. We use no advertising or analytics cookies.
Security
Data is encrypted in transit and at rest. Each business’s records are isolated from every other business’s at the database level. Mail server passwords and accounting credentials are held in an encrypted vault. Invoice links are unguessable, and we store only a one-way hash of each one. No system is perfectly secure; if a breach affects your information we will tell you without undue delay.
Retention, export and deletion
We keep your information while your account is open. You can ask us for a copy of your records or for your account to be deleted by emailing the address below. We will act on a verified request within 30 days, except for information we are legally required to keep. Deleted data leaves our providers’ backups as those backups expire.
Your rights
Depending on where you live, including under the GDPR and California law, you may have the right to access, correct, delete or export your personal information, and to object to or restrict how it is used. Email us to exercise any of these; we will not treat you differently for doing so. You may also complain to your local data protection authority.
Children
BillPaisan is a business tool and is not directed at anyone under 18. We do not knowingly collect information from children.
Changes to this policy
When we change this policy we will update the date at the top of this page. If a change is material, we will also email account holders before it takes effect.
Contact
Paisan AI, LLC
102 North Miller Street
Greer, SC 29650
[email protected]