Privacy Policy

1. Scope

By using the Service, you agree to the practices described here.

2. Information We Collect

Account information

When you create an account, we collect your email address, ZIP code, and any verification or login details you provide. If you contact us for support, we may retain those communications.

Utility bill documents and data

When you upload a utility bill, screenshot, PDF, or photo, we collect and may store the original file and the information visible in it, which may include:

• customer name and service address
• utility account number or service identifier
• bill totals, line items, and charges
• billing dates, due dates, and billing periods
• electricity usage amounts and meter readings
• rate plan, rider charges, taxes, and credits
• supplier rate, price-to-compare, and contract details
• any other information your bill contains

We treat uploaded bill documents as sensitive account-related personal information and limit access to personnel and vendors who need it to operate the Service.

Household and income information

Some features, specifically the Ohio bill assistance screening, ask you to voluntarily provide your household size and approximate monthly income range. This information is used only to generate the on-screen result. It is not stored beyond your current session and is not associated with your account.

Automatically collected information

We may automatically collect device type, browser type, IP address, referral URL, approximate location, pages viewed, clicks, usage activity, timestamps, and similar diagnostic information when you use the Service.

Information from third parties

We may receive information about you from payment processors, advertising platforms, email verification vendors, and fraud prevention vendors as part of operating the Service.

3. How We Use It

We use personal information to:

• create and manage accounts and authenticate users
• receive, store, analyze, and explain uploaded utility bills
• generate bill summaries, extractions, and AI-assisted outputs
• screen for potential Ohio utility assistance eligibility when you provide household information
• send account verification emails, bill summary emails, and service-related notices
• process subscription billing, invoices, and refunds
• maintain security, performance, logs, and debugging workflows
• improve extraction quality, model routing, and system reliability
• measure site traffic, product usage, and advertising performance
• comply with legal obligations and enforce our Terms of Use

BillLens does not use uploaded bills to provide legal or financial advice.

4. Legal Bases

Where required by applicable law, we process personal information based on one or more of the following legal bases:

• your consent, where applicable
• performance of a contract with you
• legitimate interests, including operating and improving the Service, preventing fraud, and measuring marketing performance
• compliance with legal obligations

5. Disclosure and Third-Party Services

BillLens uses the following providers to operate the Service. Each processes your information only as needed to deliver their function:

• Railway - cloud hosting and infrastructure
• Stripe - payment processing and subscription billing
• Resend - email delivery
• Meta (Facebook) - advertising measurement via the Meta pixel
• Anthropic - artificial intelligence services for document analysis

We may also disclose personal information to:

• professional advisors, auditors, and insurers acting on our behalf
• law enforcement, regulators, courts, or other parties when required by law or legal process
• successors in connection with a merger, acquisition, reorganization, or sale of assets

We do not sell your personal information or your uploaded bill documents for money. Use of the Meta pixel may constitute "sharing" under California law for cross-context behavioral advertising purposes. See Section 11 for your opt-out rights.

6. Data Retention

• Account profile, including email and ZIP code: while your account is active, plus 3 years after closure for security and compliance.
• Uploaded bill files: original uploaded files are deleted automatically after 30 days; they may be deleted sooner after a verified account deletion request.
• Extracted bill data and saved analyses: while your account is active; deleted within 30 days of a verified account deletion request, except where retention is required by law.
• Household and income information: current session only, not stored.
• Payment and transaction records: 7 years, as required for tax and accounting compliance.
• Server logs and diagnostics: 90 days on a rolling basis.

Certain records may be retained longer when necessary to resolve disputes, prevent fraud, or comply with legal obligations.

7. Cancellation, Deletion, and Downgrade Effects

If you cancel a paid plan, downgrade to a free account, or close your account entirely, access to stored bills, analyses, history, and exports may be reduced to free-tier limits or removed. Certain information may still be retained after a cancellation or deletion request when reasonably necessary for:

• legal compliance and tax obligations
• fraud prevention and chargeback handling
• security investigations
• resolving open disputes
• exercising or defending legal claims

8. Cookies, Pixel, and Tracking

We use browser local storage to support session state and to prevent duplicate event tracking, for example, to avoid recording the same purchase twice. We do not use third-party advertising cookies beyond the Meta pixel.

Meta pixel. We use the Meta (Facebook) pixel on this site to measure advertising performance. The pixel may record actions such as page visits, account signups, checkout starts, and completed purchases. This information is shared with Meta to help us understand how our advertising performs. If you use Facebook or Instagram, Meta may connect this data to your account on those platforms in accordance with Meta's own privacy policy.

To opt out of Meta's use of this data, visit your Facebook ad settings or the Digital Advertising Alliance opt-out page at optout.aboutads.info.

9. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption of data in transit, role-based access controls, and restricted production access. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have done so, contact us at help@bill-lens.com and we will delete it promptly.

11. California Privacy Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Know: the categories of personal information we collected about you, the sources, the purposes, the categories of recipients, and whether it was sold or shared.
• Access: specific pieces of personal information we hold about you.
• Delete: your personal information, subject to legal exceptions.
• Correct: inaccurate personal information.
• Opt out: of the sale or sharing of your personal information.

Categories collected in the prior 12 months:

• Identifiers: email, ZIP code, IP address. Collected: yes.
• Commercial information: plan type, billing records. Collected: yes.
• Internet activity: pages viewed, usage events. Collected: yes.
• Documents and account data: uploaded bills, extracted bill data. Collected: yes.
• Inferred information: bill analysis outputs. Collected: yes.
• Sensitive information, precise geolocation: collected: no.
• Sensitive information, financial account data: no. Stripe handles payment; we store plan status only.

Sources: directly from you at account creation and bill upload; automatically from your use of the Service; from Stripe for billing status; from Meta for advertising measurement.

Business purposes: service operation, billing, security, fraud prevention, product improvement, advertising measurement.

Recipients: Railway for hosting, Stripe for payments, Resend for email, Meta for advertising measurement, and Anthropic for AI analysis.

Sold: no. Shared for cross-context behavioral advertising: yes, via the Meta pixel. You may opt out using the Meta ad settings link above or by emailing help@bill-lens.com.

To submit a California privacy request, email help@bill-lens.com with the subject line "California Privacy Request." We will verify your identity before responding and will reply within 45 days. We will not discriminate against you for exercising these rights.

12. Other State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Texas, and other states with applicable privacy laws may have rights to access, correct, delete, or opt out of certain data processing. To submit a request, email help@bill-lens.com. We will respond as required by applicable law.

13. International Users

The Service is intended primarily for users in the United States. If personal information is transferred to or processed in another country, we do so subject to appropriate safeguards where required by law.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised policy with an updated date. For material changes:

• changes affecting new users take effect when posted
• changes affecting existing paid subscribers take effect on the next renewal date after notice, unless earlier changes are required by law or necessary for security
• we will use reasonable efforts to notify you through the website, your account, or email

Continued use of the Service after the effective date of changes constitutes acceptance of the updated policy.

15. Contact

For privacy questions, data requests, deletion requests, and legal notices:

BillLens
PO Box 10794
Burbank, CA 91510
help@bill-lens.com

We will respond to privacy rights requests within 30 days.