Privacy

Last updated: 4 May 2026

Billby is a small time-tracking and invoicing tool. This page explains what data we collect and what we do with it. We try to keep it short and honest.

What we collect

When you create an account:

  • Your name, email, and a hashed password
  • Business details you choose to add (business name, address, mobile, tax number, default rates and currency)

As you use the app:

  • The clients, projects, and time entries you create
  • The invoices you generate, send, and mark as paid
  • Recipient email addresses when you send an invoice

We don't run third-party analytics or tracking scripts. We don't sell, share, or rent your data.

How we use it

To run the service: store your work, generate invoices, and deliver invoice emails to recipients you choose. That's it.

Storage and retention

Your data is stored for as long as your account exists. If you want it deleted, contact usand we'll remove it.

Authentication and sessions

You sign in with email and password. The password is hashed with bcrypt; we never store or log it in plain text. Sessions use a signed JWT held in your browser's localStorage; it expires per the token's own claim (currently 7 days).

Email

When you send an invoice, the recipient's email address is passed to our SMTP provider for delivery. We don't add the recipient to any mailing list.

Cookies

We don't set tracking cookies. Your auth token lives in localStorage, not in a cookie.

Your rights

To request a copy of your data or delete your account and all associated data, get in touch.

Changes

If we change anything material on this page, we'll update the "Last updated" date and notify users by email.

Contact

For privacy questions, contact us.