Privacy
Last updated: 4 May 2026
Billby is a small time-tracking and invoicing tool. This page explains what data we collect and what we do with it. We try to keep it short and honest.
What we collect
When you create an account:
- Your name, email, and a hashed password
- Business details you choose to add (business name, address, mobile, tax number, default rates and currency)
As you use the app:
- The clients, projects, and time entries you create
- The invoices you generate, send, and mark as paid
- Recipient email addresses when you send an invoice
We don't run third-party analytics or tracking scripts. We don't sell, share, or rent your data.
How we use it
To run the service: store your work, generate invoices, and deliver invoice emails to recipients you choose. That's it.
Storage and retention
Your data is stored for as long as your account exists. If you want it deleted, contact usand we'll remove it.
Authentication and sessions
You sign in with email and password. The password is hashed with bcrypt; we never store or log it in plain text. Sessions use a signed JWT held in your browser's localStorage; it expires per the token's own claim (currently 7 days).
When you send an invoice, the recipient's email address is passed to our SMTP provider for delivery. We don't add the recipient to any mailing list.
Cookies
We don't set tracking cookies. Your auth token lives in localStorage, not in a cookie.
Your rights
To request a copy of your data or delete your account and all associated data, get in touch.
Changes
If we change anything material on this page, we'll update the "Last updated" date and notify users by email.
Contact
For privacy questions, contact us.