Privacy Policy

1. Overview

BillHub ("we", "us", "our") operates a household bill aggregation service that lets you upload, organize, and analyze your utility bills and statements of account. This Privacy Policy describes how we handle information when you use our website and application.

We are based in the Philippines and process personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. By creating an account, you agree to the practices described here.

2. Information we collect

Information you provide

• Account details — your name, email address, and password (stored only as a salted hash).
• Profile settings — optional phone number, profile photo, preferred currency, date format, and time zone.
• Bill documents — PDFs, images, and photographs of bills you choose to upload.
• Bill details — provider, amount due, statement date, due date, billing period, account number, and consumption figures, whether extracted automatically or entered by you.
• Support messages — anything you send us through the contact form or by email.

Information collected automatically

• Usage data — pages visited, features used, and actions taken within the application.
• Device and log data — browser type, operating system, IP address, and timestamps.

We do not collect payment card numbers, online banking credentials, or one-time passwords. BillHub records that a bill was marked as paid — it never processes the payment itself.

3. How we use your data

• To extract bill details from documents you upload and present them for your review.
• To organize your bills, calculate totals, and generate spending trends and insights.
• To notify you about bills that are due soon or overdue.
• To authenticate you, keep your account secure, and prevent abuse.
• To respond to your support requests.
• To diagnose problems and improve the reliability of the service.

We do not use your bill data to build advertising profiles, and we do not perform automated decision-making that has legal effects on you.

4. Your bill documents

Documents you upload are stored in encrypted object storage and are accessible only to your account. Automatic extraction runs on our own infrastructure for the sole purpose of reading the fields listed in Section 2.

Extraction results are always presented to you for confirmation before a bill is saved. When our confidence in a field is low, we flag it so you can verify the value yourself. If you delete a bill, its uploaded document is deleted along with it.

5. Sharing and disclosure

We do not sell your personal information. We share data only in these limited situations:

• Service providers — cloud hosting, storage, and email delivery partners who process data on our instructions and under confidentiality obligations.
• Legal requirements — when compelled by a valid subpoena, court order, or applicable law.
• Protection of rights — to investigate fraud, security incidents, or violations of our Terms of Service.
• With your consent — for example, if you explicitly share a dashboard with a household member.

We do not share your data with your utility providers, credit bureaus, lenders, or marketers.

6. Security

We protect your information using industry-standard safeguards, including:

• TLS encryption for all data in transit.
• Encryption at rest for uploaded documents and database records.
• Password hashing with a modern, salted algorithm.
• Access controls limiting internal access to authorized personnel only.
• Regular backups and monitoring for unauthorized access.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the National Privacy Commission as required by law.

7. Data retention

We keep your bills and account data for as long as your account remains active, since historical statements are what make trend analysis useful. If you delete an individual bill, it and its document are removed promptly.

When you delete your account, we permanently erase your bills, documents, and profile within 30 days, except where a longer period is required by law. Anonymized, aggregate statistics that cannot identify you may be retained.

8. Your rights

Under the Data Privacy Act, you have the right to:

• Be informed about how your data is processed.
• Access the personal data we hold about you.
• Correct inaccurate or outdated information.
• Object to certain processing activities.
• Erasure or blocking of your data in the circumstances allowed by law.
• Data portability — export your bills and details in a machine-readable format.
• Damages for violations of your data privacy rights.

You can exercise most of these directly in Settings → Data & Privacy, where export and account deletion are self-service. For anything else, contact us using the details in Section 12.

9. Cookies

We use a small number of cookies and similar local storage keys, limited to what the product needs:

• Essential — keeping you signed in and securing your session.
• Preferences — remembering settings such as your collapsed sidebar state and chosen theme.
• Analytics — aggregate, privacy-respecting usage measurement to help us improve the product.

We do not use third-party advertising or cross-site tracking cookies. You can clear or block cookies in your browser, though essential cookies are required to stay signed in.

10. Children's privacy

BillHub is intended for users aged 18 and above. We do not knowingly collect personal information from children. If you believe a minor has created an account, contact us and we will remove it.

11. Changes to this policy

We may update this policy as the product evolves or as legal requirements change. When we make material changes, we will update the "Last updated" date above and notify you by email or through an in-app notice before the changes take effect. Continuing to use BillHub after that date means you accept the revised policy.

12. Contact us

For privacy questions, requests, or complaints, reach our Data Protection Officer:

You may also lodge a complaint with the National Privacy Commission of the Philippines if you believe your rights under the Data Privacy Act have been violated.