Privacy Policy

1. Introduction

OpenBillet (“we,” “us,” or “our”) operates the OpenBillet platform at openbillet.com. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our services. By using OpenBillet, you agree to the practices described in this policy.

2. Information We Collect

Account information: When you register, we collect your email address and password (stored as a secure hash). If you subscribe to a paid plan, Stripe collects your payment details — we never store credit card numbers.

Business data you create: Client names, email addresses, phone numbers, addresses, project details, milestone content, uploaded files and photos, messages, and proposals you create within the platform.

Team member information: If you invite team members or field workers, we collect their email address and, if provided, phone number.

Push notifications: If you or your team enable push notifications, we store a browser-issued subscription identifier (not linked to your identity beyond your account) in order to deliver those notifications.

Usage data: Pages visited, features used, timestamps, and browser/device information collected automatically via server logs.

Communications: If you contact us for support, we retain those communications.

3. How We Use Your Information

• To provide, maintain, and improve the OpenBillet platform
• To process payments and manage your subscription
• To send transactional emails and push notifications (portal updates, job reminders, billing receipts)
• To respond to support requests
• To detect and prevent fraud or abuse
• To comply with legal obligations

We do not sell your personal information to third parties. We do not use your data to serve advertisements.

4. Data Sharing

We share data only with service providers necessary to operate the platform:

• Supabase — database and authentication hosting
• Stripe — payment processing
• Resend — transactional email delivery
• Vercel — application hosting
• Sentry — error monitoring, to help us identify and fix technical issues
• Apple, Google, and Mozilla push services — used solely to deliver push notifications to devices that have opted in; no personal data beyond the notification content is shared with them

Each provider is bound by their own privacy policy and data processing agreements. We do not share your data with anyone else unless required by law.

5. Data Retention & Deletion

We retain your data for as long as your account is active. You can permanently delete your account and all associated data at any time from Settings — this deletion is immediate and irreversible, except where we are required to retain limited records for legal or financial compliance purposes (e.g., billing records required by tax law).

6. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and row-level security policies on our database. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to know — what personal information we collect and how we use it
• Right to delete — request deletion of your personal information
• Right to opt out — we do not sell personal information, so no opt-out is needed
• Right to non-discrimination — we will not discriminate against you for exercising your rights

You can exercise your right to export or delete your data at any time using the “Export My Data” and “Delete My Account” options in Settings. For any other request, contact us at support@openbillet.com.

8. GDPR Rights (EEA/UK Residents)

If you are located in the European Economic Area or United Kingdom, you have the following rights under GDPR:

• Right of access — obtain a copy of your personal data
• Right to rectification — correct inaccurate personal data
• Right to erasure — request deletion of your personal data
• Right to restriction — limit how we process your data
• Right to data portability — receive your data in a portable format
• Right to object — object to certain types of processing

Our legal basis for processing is contract performance (to provide the service you signed up for) and legitimate interests. You can exercise your right to access, port, or erase your data at any time using the “Export My Data” and “Delete My Account” options in Settings. For any other request, contact us at support@openbillet.com. We will respond within 30 days.

9. Cookies

We use essential cookies only — specifically, session cookies required for authentication. We do not use tracking, advertising, or analytics cookies.

10. Children's Privacy

OpenBillet is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us immediately.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or by posting a notice on the platform. Continued use after changes constitutes acceptance.

12. Contact

For privacy-related questions, requests, or complaints, contact us at:
support@openbillet.com