Privacy Policy

Who we are

This privacy policy applies to the BillHeron apps for iPhone and Android and the website billheron.com (together, the "Service"). BillHeron is a tool for creating invoices, estimates and receipts.

The Service is provided by ONERACK LTD, which is responsible for your personal data. You can reach us at support@onerack.eu.

The short version

• You can use the app fully offline, without an account. Your documents then stay on your device.
• Your documents only go to our servers when you sign in to an account and turn on sync, so they're available on your other devices and on the website.
• We never sell your data, and the content of your documents is never used for advertising or analytics.
• You can delete your data or your whole account at any time.

Using the app without an account

The core features of BillHeron work offline. Your invoices, estimates, receipts, clients, items, business details and settings are stored locally on your device and are not uploaded to our servers.

The app may ask for limited permissions, which are only used for the feature you're using:

• Photos or files, to add your logo, a signature or an attachment
• File storage, to save and share your PDFs
• Notifications, if you want reminders

Because this data lives on your device, its security depends on how your device is protected. We recommend a passcode, Face ID or fingerprint lock.

Using the website

On billheron.com, the document you're working on is saved in your browser's storage, so nothing is lost when you reload the page. It's not sent to our servers until you sign in and save it to your account.

Downloading a PDF requires an account. To create the PDF, the document is sent to our server, turned into a PDF and sent back. It isn't kept there.

To show prices in your currency and start new documents with the right defaults, the website looks at the country your connection comes from. Only the country is used, and it isn't stored.

When you sign in and turn on sync

You can sign in with Apple or Google. We then receive your name and email address from them. If you use Apple's "Hide My Email", we only receive a private relay address.

When you're signed in and sync is on, the following is stored in your account in our cloud database, so it's the same on all your devices and on the website:

• Your invoices, estimates and receipts
• Your clients, items, business profiles, terms and payment methods
• Your settings for new documents
• Files you add, such as logos, signatures and attachments

Only you can access the data in your account. You can turn sync off in the app at any time; documents already on your device stay there.

Optional online features

Some optional features need an internet connection and only send what that feature needs:

• Exchange rates, to convert amounts between currencies
• AI writing in the app: the text you enter is sent to process your request
• Notifications, which you can turn off at any time in your device settings
• Purchases and subscriptions, described below

Purchases and subscriptions

Subscriptions can be bought in the App Store, in Google Play or on the website. Payments are handled by Apple, Google or our payment provider. We never receive or store your full card details.

We receive the status of your purchase (such as the plan, renewal date and whether it's active) and link it to your account, so Pro works on all your devices. If you ask for a refund, limited purchase details may be shared with Apple or Google to verify the purchase.

Emails

When you create an account, we may use your email address to send you emails about BillHeron, such as tips and product news. Every email has a link to unsubscribe, and you can also ask us at support@onerack.eu. We always send emails that are needed for your account, such as about your subscription.

Analytics and advertising

In the app, we may collect usage data (such as app events and device information) through third-party services, to improve the app and measure our marketing. Where required, we ask for your permission first.

On the website we use Vercel Web Analytics to count visits and see which pages are used. It works without cookies, doesn't follow you across other websites and doesn't store your IP address. It only records the page, the referring site and general information such as your country, browser and type of device, and document ids are removed before anything is sent. The website doesn't use advertising trackers.

The content of your documents is never part of analytics or advertising.

Cookies and browser storage

The website only uses cookies and browser storage that it needs to work:

• Keeping you signed in
• Remembering your website language and theme
• Saving the document you're working on and your settings in this browser

Service providers and where data is stored

We use carefully selected service providers for hosting, our database, sign-in, sync, payments, notifications and analytics. They process data only on our instructions, under data processing agreements, and may not use it for their own purposes.

The data in your account is stored in the European Union. If a provider processes data outside the EU, we make sure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses.

Why we're allowed to process your data

• To provide the Service you asked for, such as your account, sync and purchases (performance of a contract)
• With your consent, for example for analytics or advertising where it's required, and notifications. You can withdraw your consent at any time
• For our legitimate interests in keeping the Service secure, fixing problems, preventing abuse and telling you about our product
• To meet legal obligations, such as keeping purchase records for tax purposes

How long we keep data

We keep the data in your account for as long as you have an account. When you delete data or your account, it's removed from our systems straight away, and from backups within a limited time. Purchase records may be kept longer where the law requires it.

Your rights

You have the right to access, correct, export and delete your personal data, to restrict or object to how we use it, and to withdraw consent you gave.

• Delete your whole account: in the app under Settings → Account → Delete account, or on the Delete account page
• Delete the data in your account but keep the account: on the Delete data page
• Anything else: email us at support@onerack.eu

You can also file a complaint with a data protection authority, such as the Commissioner for Personal Data Protection in Cyprus or the authority where you live.

Security

All data between the apps, the website and our servers travels over encrypted connections. The data in your account can only be accessed with your sign-in. No system is completely secure, but we work hard to protect your data.

Children

BillHeron is not intended for children, and we don't knowingly collect data from children under 13.

Changes to this policy

We may update this policy to reflect new features or legal requirements. Important changes will be announced in the app or on the website. The date below shows the latest version.

Contact

Questions about this policy or your data? Email us at support@onerack.eu.