1. Who we are

Billing Plus ("Billing+", "the App", "we", "us") is a product of Carburant Technologies Limited, a company registered in Nigeria. We build invoicing, receipt, point-of-sale, inventory, expense and client-management tools for freelancers and small businesses.

This policy explains what information we collect, why we collect it, who we share it with, how long we keep it, and what you can do about it.

For the purposes of the Nigeria Data Protection Act 2023 (NDPA), the EU and UK General Data Protection Regulation (GDPR) and similar laws, Carburant Technologies Limited is the data controller for the information described in this policy — except where section 3 says otherwise.

Privacy contact: [email protected]
Postal: Carburant Technologies Limited, Warri, Delta State, Nigeria

2. What this policy covers

• The Billing Plus mobile apps on iOS and Android
• The web app at suite.getbilling.co
• The website at getbilling.co, including the blog, the FAQs and the tax calculators
• Our email, WhatsApp and in-app messages to you

It does not cover third-party services you reach from our products — your payment provider, your email app, WhatsApp, or a client's own website. Their policies apply there.

3. Two kinds of data: yours, and your customers'

This distinction matters, so it comes early.

Your data. Your name, email, phone number, business details, subscription, and how you use the App. We decide how this is handled, so we are the controller of it. The rest of this policy is mostly about this.

Your business data. The invoices, receipts, client records, product catalogue, sales and expenses you create inside Billing Plus — including the personal details of your clients and customers.

You control that data. You decide what to enter, who to send documents to, and how long to keep it. We store and process it on your instructions, as a data processor on your behalf. We do not use your clients' details for our own marketing, we do not sell them, and we do not contact your clients except when you tell the App to send them something (an invoice, a receipt, a reminder, a payment link).

If you are subject to the NDPA, GDPR or a similar law, you are the controller of your customers' data. That means it is your responsibility to have a lawful basis for collecting it, to tell your customers what you do with it, and to answer their requests. We will help you do that — see section 12.

4. Information we collect

4.1 Account and identity

Your name, email address, phone number, password (stored hashed, never in readable form), and your profile photo if you add one. If you sign in with Google or Apple, we receive your name, email address and a unique identifier from them — not your password.

4.2 Business profile

Your business name, address, logo, contact details, currency, invoice numbering, bank or payment details you choose to display on documents, and tax identifiers such as a TIN or VAT number where you enter them.

4.3 Contacts and client records

This is new in this version of the policy, and it is worth reading closely.

Contacts you type in. When you add a client, customer or supplier, we store the name, email address, phone number, billing address and any notes you enter.

Contacts you import from your device. With your permission, Billing Plus can read your device's contacts so you can add a client without retyping their details. When you grant this permission, the App reads your address book on your device and shows you a picker. Only the contacts you actually select are copied to your Billing Plus account — we store the name, phone number and email address of the contact you chose. We do not upload, copy or store your full address book. We do not use your contacts to find other Billing Plus users, to invite anyone, or for advertising. You can refuse or withdraw this permission at any time in your device settings; the App keeps working, you just enter client details manually.

Contacts you give us for marketing. If you subscribe to our newsletter, download a template or guide, enter your details on a landing page, message us on WhatsApp, or ask to be contacted, we collect the name, email address and phone number you give us and use them to reply and — where you have opted in, or where we are permitted to send updates about a service you already use — to send you product news and offers. Section 9 covers how to stop this.

4.4 Documents and transactions

Invoices, quotes, receipts, delivery notes, expenses, payment records, recurring invoice schedules and reminders — including line items, amounts, dates, currencies, taxes and any notes or terms you add.

4.5 Point of sale and inventory

Products and services in your catalogue, prices, stock levels and stock movements, barcodes, held and completed sales, and (where you use staff accounts) which user recorded a sale.

Camera and barcode scanning: the App uses your camera to read barcodes when you add stock or ring up a sale.

4.6 Files and photos you upload

Your logo, product images, and any receipt photos or attachments you add to expenses or documents.

Receipt photos are stored in your account so you keep a digital record. If you use the receipt reader to fill in an expense automatically, the photo is also sent to our AI provider to be read — see section 6.

4.7 Payment and subscription information

If you subscribe, your payment is handled by the store or processor you pay through — Google Play, the Apple App Store, or a card processor on our website. We do not receive or store your full card number, CVV or bank credentials. We receive and keep a record of the transaction: plan, amount, currency, date, status, a partial card descriptor or token, and the store's order identifier — enough to give you the right plan, honour refunds and keep our accounts.

When your customers pay you through a payment link, the payment is processed by the provider behind that link — PayPal, Paddle, Paystack, Opay or Monnify. Their terms and privacy policies apply to that payment. We receive confirmation of the outcome so we can mark the invoice paid.

4.8 Usage, device and diagnostic data

Device model, operating system and version, app version, language and region settings, IP address, time zone, crash reports and performance diagnostics, and events describing how you use the App — for example that an account was created, a business was set up, an invoice was created or sent, a checkout was started, or a subscription was purchased. These events are tied to a pseudonymous identifier, and to your account where you are signed in.

4.9 Website data

Pages visited, referring site, search terms that brought you to us, approximate location derived from IP address, and cookie or similar identifiers. See section 10.

4.10 Communications

Your messages to support, the contents of contact forms, WhatsApp conversations with our business number, replies to our emails, app store reviews you write, and our replies to you.

4.11 What we deliberately do not collect

We do not ask for or store government ID numbers, BVN, NIN, full bank account credentials, or biometric data. We do not track your precise GPS location. We do not read your SMS messages, your call logs or your WhatsApp chats.

5. How we use your information, and our legal basis

We do not sell your personal information, and we do not share it with third parties for their own independent marketing.

6. Artificial intelligence

We use AI in two features, and we would rather tell you plainly than bury it.

(a) Receipt reader. When you photograph a receipt to log an expense, you can have Billing Plus read it for you. The image is sent to OpenAI, which extracts details such as the merchant name, date, total, tax and line items and returns them to the App so the expense form is filled in for you. OpenAI processes the image only to produce that result. Under its API terms it may hold the image and the result for up to 30 days to run the service and detect abuse, then deletes them, and it does not use them to train its models. If you would rather not use this, take the photo without the reader — or skip the photo — and type the expense in yourself.

Receipts sometimes carry more than a total: a card's last four digits, a cashier's name, a delivery address. Have a look before you scan anything you would rather not send off the device.

(b) Expense categorisation. When you log an expense, Billing Plus can suggest a category for it — fuel, stock, transport, data, and so on. To do this, the expense description, amount and merchant name are sent to OpenAI on the same terms. The suggestion is only a suggestion. You can change it, and the category you pick is the one that's saved.

We also use AI away from your data, in ways that don't involve your account: drafting blog posts, help articles and marketing copy, which a person reviews before publishing, and summarising aggregated, non-identifying usage trends. We do not put customer records, client lists or financial data into general-purpose AI tools for this.

What we commit to:

• We do not use your business data — your invoices, clients, customers, products, prices, receipts or expenses — to train AI models, ours or anyone else's.
• We use OpenAI through its API, under terms that exclude API content from model training by default. We have not opted in to sharing your content for training, and we won't.
• OpenAI processes this data in the United States. Section 8 covers international transfers.
• We do not sell your data to AI companies and do not license it for model training.
• AI output can be wrong. A scanned total, a read date, a suggested category — all of it is a starting point, not a fact. Check it before you file it or send it on. Once you save it, it's your record.
• Nothing is decided about you automatically. We don't use AI to make decisions that affect your access to the service, your plan or your money.
• These two features are the whole of it today. If we add another, we'll update this section and tell you before it goes live.
• You can ask us what AI processing applies to your account using the contact in section 15.

7. Who we share information with

We share only what is needed, and only with these categories:

Infrastructure and hosting. Our cloud hosting, database and file storage providers, who store your data on our behalf.

Analytics and product measurement. Google Analytics 4 and Firebase (Google), and the app stores' own analytics (Google Play Console, Apple App Store Connect), which give us aggregated and pseudonymous data about installs, usage and crashes.

Advertising and attribution. Meta and TikTok advertising tools and Google Ads, where enabled, to measure campaigns and reach similar audiences. Only with your consent where consent is required.

Payments. Google Play, Apple, and the payment providers behind payment links — PayPal, Paddle, Paystack, Opay and Monnify.

Communications. Our email delivery provider, our push notification provider, and WhatsApp Business (Meta) for the messages you receive from us and the messages you send to our business number.

AI provider. OpenAI (United States), which processes receipt images and expense details for the two features described in section 6, under API terms that exclude your content from model training.

Professional advisers. Accountants, auditors and lawyers, bound by confidentiality.

Authorities. Where we are legally required to, or to establish, exercise or defend legal claims. We will tell you when we are permitted to.

A buyer or successor. If Carburant Technologies Limited is involved in a merger, acquisition or sale of assets, your information may transfer as part of it. We will notify you and this policy will continue to apply until it is replaced.

Anyone you tell us to. Your clients receive the documents you send them. Staff you add to your business can see the business data you give them access to.

8. Where your data goes

We are based in Nigeria and our service providers operate internationally, including in the United States and the European Union. Your information may be stored or processed outside your country.

Where we transfer personal data out of Nigeria, we do so on the bases permitted by the NDPA — including adequacy, contractual safeguards, or your consent. Where we transfer personal data out of the EEA or the UK, we rely on adequacy decisions or Standard Contractual Clauses with the receiving party. You can ask us for details.

9. Marketing messages, and how to stop them

• Email: unsubscribe link at the foot of every marketing email, or email us.
• WhatsApp: reply STOP to any broadcast, or block the number.
• Push notifications: turn them off in your device settings, or in the App.
• In-app messages: these come with the product.

Service messages — subscription receipts, password resets, security alerts, changes to these terms — are part of the service and can't be switched off while you have an account.

10. Cookies and similar technologies

On getbilling.co we use:

• Necessary cookies — sign-in, security, language preference. These can't be switched off.
• Analytics cookies — Google Analytics, to understand which pages help and which don't.
• Advertising cookies — where enabled, to measure ads and reach relevant audiences.

You can control non-essential cookies through your browser settings.

In the mobile apps we use device and advertising identifiers rather than cookies. On iOS, you control app tracking through Apple's App Tracking Transparency prompt and your device settings. On Android, you can reset or delete your advertising ID in your device settings.

11. How long we keep things

Where we are required to keep records for legal reasons, we keep only what the law requires and restrict access to it.

12. Your rights

Depending on where you live, you can ask us to:

• Access the personal data we hold about you
• Correct anything inaccurate
• Delete your account and data
• Export your data in a portable format
• Restrict or object to certain processing, including direct marketing and profiling
• Withdraw consent you previously gave, without affecting what happened before
• Not be discriminated against for exercising any of these (for California residents)

Doing it yourself: you can edit your details in your account settings, export your records from the App, and delete your account from within the App's settings. You can also ask us to delete your account by emailing [email protected].

Asking us: email [email protected]. We respond within 30 days. We may need to verify who you are first.

If the request concerns your customers' data — for example a customer of yours asks you to delete their record — you handle it in the App, and we will help if you need us to.

Complaints. If you are in Nigeria, you can complain to the Nigeria Data Protection Commission (NDPC). In the EEA or UK, you can complain to your national supervisory authority. We would prefer you came to us first.

13. Security

We encrypt data in transit and at rest, hash passwords, restrict internal access to what each person needs to do their job, and keep our systems patched.

No system is completely secure, and we won't claim otherwise. Protect your side too: use a strong, unique password, don't share your login, and lock your device. If you believe your account has been accessed without your permission, contact us immediately.

If a breach occurs that is likely to result in risk to you, we will notify you and the relevant regulator within the timeframes the law requires — 72 hours to the NDPC and to EU/UK authorities where applicable.

14. Children

Billing Plus is a business tool. It is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

15. Changes, and how to reach us

We update this policy when our practices change. The date at the top always reflects the current version. For material changes — a new category of data, a new purpose, a new AI feature — we will tell you by email or in the App before the change takes effect.

Questions, requests or complaints:

The Administration Team
Billing Plus — Carburant Technologies Limited
[email protected]
Warri, Delta State, Nigeria

This policy is published in English and translated into other languages for convenience. Where a translation differs from the English version, the English version applies.