Privacy Policy

Who we are

Billstride is operated by superview llc. We are the controller responsible for the personal data described in this policy. You can reach us at [email protected]; full company details are in the imprint.

Data we collect

Account data: your email address, your name, and your sign-in method (email link or Google account).

Business data: the sender details, logo, tax identifiers, and bank details you enter to create invoices.

Invoice data: the invoices you create, including the names, addresses, and tax identifiers of your invoice recipients.

Payment data: when you top up your balance, payment is handled by our payment processor. We store your top-up history and billing country; we never see or store your full card details.

Usage data: server logs (IP address, browser, requested pages) and basic analytics events.

Support data: messages you send us via the support chat or by email.

Why we process your data

We process your data to provide the service (creating, storing, and sending invoices), to process payments, to comply with legal obligations such as bookkeeping and tax rules, to keep the service secure, and, only with your consent, to send you occasional product emails. Where the GDPR applies, the legal bases are performance of a contract (Art. 6(1)(b)), legal obligation (Art. 6(1)(c)), legitimate interests (Art. 6(1)(f)), and consent (Art. 6(1)(a)).

Your customers' data

Invoices you create contain data about your customers. For this data, you are the controller and we act as your processor: we store and process it only to provide the service and follow your instructions. If your customers want their data corrected or deleted, they should contact you.

Service providers

We use a small number of specialized service providers to run Billstride: hosting and database infrastructure in Germany, a content delivery and security network, a payment processor, an email delivery service, an AI service for extracting invoice data (only when you use the PDF import feature), a sign-in provider, and a support chat service.

These providers process data on our behalf under data processing agreements. You can request the current list of providers at [email protected].

Cookies

We use cookies that are necessary to run the service: a session cookie to keep you signed in and a cookie that remembers your language. Google Analytics cookies are set only if you accept them in the cookie banner; you can change your choice at any time via "Cookie settings" in the footer. The support chat sets its own cookies. We do not use advertising cookies.

Where your data is stored

Your data is hosted on servers in Germany, with daily backups. Some of our providers may process data in the United States or other countries; where they do, transfers are covered by safeguards such as the EU standard contractual clauses or the EU-U.S. Data Privacy Framework.

How long we keep your data

We keep your data for as long as your account exists. Invoices may be kept longer where statutory retention periods (for example under tax law) require it. Backups are rotated automatically. If you want your account deleted, contact us at [email protected]; we then delete or anonymize your data unless we are legally required to keep it.

Your rights

Where the GDPR applies, you have the right to access, correct, delete, and export your data, to restrict or object to processing, and to withdraw consent at any time. To exercise any of these rights, email us at [email protected]. You also have the right to lodge a complaint with a data protection supervisory authority.

Marketing emails

We occasionally send product emails to users who signed up. Every marketing email contains an unsubscribe link, and we honor unsubscribes immediately. Transactional emails (sign-in links, invoices you send) are not affected.

Changes to this policy

We may update this policy as the service evolves. The current version is always available on this page; the date above shows when it was last changed.