Privacy Notice

1. Information We Collect

We gather only the information necessary to provide our services:

• Account Information: Name, email address, and billing details
• Usage Data: How you interact with our service, to help us improve it
• Support Information: Communications when you reach out for help
• Website Analytics: Basic usage statistics to understand how our site is used

2. How We Use Your Information

We use the information we collect to:

• Provide and improve our SaaS services
• Respond to your support requests
• Send important service updates and security notices
• Analyze usage patterns to develop better features
• Process payments and manage subscriptions

3. What We Don't Do

We don't sell your personal information to third parties. We don't use your data for targeted advertising. We don't share your information with marketing companies, track you across other websites, or create profiles for sale.

4. Data Security and Storage

We take data security seriously. Our measures include encryption of data in transit and at rest, regular security audits, strict access controls, and secure hosting infrastructure.

5. Data Ownership and Control

You have full control over your data. You can:

• Export your data at any time
• Request complete account deletion
• Update or correct your information
• Opt out of non-essential communications
• Cancel your subscription without data retention

6. Third-Party Services and Paddle

We use a limited number of trusted third-party services. All third-party providers operate under strict data protection agreements.

Paddle (Payment Processor): Our order process is conducted by our online reseller Paddle.com, who acts as the Merchant of Record for all our orders. When you make a purchase, Paddle collects and processes your payment information (such as your name, email, billing address, and payment method details) to complete transactions, manage subscriptions, handle refunds, and comply with tax obligations. Paddle processes this data as an independent data controller. For details on how Paddle handles your personal data, please refer to Paddle's Privacy Policy.

Hosting: Our application is hosted on secure infrastructure with data encrypted in transit and at rest.

7. Data Retention

When you cancel your account, we delete your data within 30 days, unless you request immediate deletion. We do not retain your data beyond what is necessary to provide our services or comply with legal obligations.

8. GDPR Compliance (EU Users)

Legal Basis: We process your data based on contract performance, legitimate interest, and consent.

Your Rights: Under GDPR, you have the right to:

• Access copies of your personal data
• Correct inaccurate information
• Request erasure ("right to be forgotten")
• Receive your data in a portable, machine-readable format
• Restrict or limit processing of your data
• Object to processing of your data
• Withdraw consent at any time

Data Transfers: International data transfers are protected via Standard Contractual Clauses or EU adequacy decisions.

Response Time: We respond to all GDPR requests within 30 days.

You may also lodge a complaint with your local data protection authority.

9. Changes to This Notice

We may update this privacy notice from time to time. We will notify you of significant changes via email or through our service. Transparency is a core value, and we will always communicate changes openly.

10. Contact Us

If you have questions about how we handle your data or wish to exercise your GDPR rights, please contact us through our website.

11. Company Information

FreshBill.app is a product of muto development, operated under CREO Ljos ehf, an Iceland-registered company committed to privacy and transparency.