Privacy Policy

1. Introduction

Evax LLC, a Wyoming limited liability company with its principal place of business at Cheyenne, Wyoming, United States (“Company”, “we”, “us”), operates the billinghub.online service (“Service”).

This Privacy Policy explains how we collect, use, disclose, and safeguard information when acting as a data controller, and how we process personal data on behalf of our customers when acting as a data processor.

This Privacy Policy forms part of our Terms of Service.

2. Roles and Scope

2.1 Company as Data Controller.
We act as a data controller with respect to:

• Account registration and administration data;
• Website usage and analytics data;
• Billing and payment information relating to our customers;
• Marketing and communications.

2.2 Company as Data Processor.
When customers use the Service to generate, store, or send invoices and related billing communications, we act solely as a data processor on behalf of the customer, in accordance with the applicable Data Processing Addendum (DPA).

3. Information We Collect

Account and Website Data.
We may collect personal data such as name, email address, company name, billing contact details, IP address, browser information, and usage metrics.

Customer Content (Processed Data).
Our customers may upload or transmit personal data of their own clients or business contacts (e.g. invoice recipients). We process such data only on behalf of and under the instructions of the customer.

4. Purpose and Legal Basis

We process personal data as a controller for the following purposes:

• Providing and operating the Service;
• Account management and customer support;
• Billing, invoicing, and payment processing;
• Security, fraud prevention, and system monitoring;
• Legal compliance.

Our legal bases include performance of a contract, compliance with legal obligations, and legitimate interests. Analytics is the one purpose we rely on consent for, and we ask for it before any analytics runs — see Cookies, Analytics and Subprocessors. You can decline, and declining is one press.

5. Retention of Data

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law or contractual obligations.

Customer content processed on behalf of customers is retained in accordance with the applicable agreement and DPA.

6. Disclosure of Data

We may disclose personal data:

• To service providers and subprocessors acting on our behalf;
• To payment processors for transaction handling;
• To comply with legal obligations or lawful requests by authorities;
• In connection with a corporate transaction, subject to confidentiality protections.

We do not sell personal information and do not share personal information for cross-context behavioral advertising.

7. Cookies, Analytics and Subprocessors

We ask before any analytics runs. On your first visit we show a banner with two equal choices. Until you accept, no analytics script is loaded and no analytics cookie is set. If you decline, none is ever loaded. Your answer is kept in your browser's local storage so that we do not ask again; it is strictly necessary for that purpose and is never sent to us.

If you accept, we load Google Analytics 4, which sets first-party cookies to count visits and to tell a returning visitor from a new one. We use it to see which pages are useful. We do not use it for advertising, we do not run advertising cookies of any kind, and we do not share analytics data for cross-context behavioral advertising. No invoice amounts, client names or document contents are ever sent to it.

Its cookies are _ga and one named _ga_ followed by our property's identifier, and both last two years from your last visit. The data they collect is received by Google LLC, which provides Google Analytics; Google is listed among our subprocessors.

You can change your answer at any time with Cookie settings at the foot of every page, or by clearing this site's data in your browser.

Cookies that are strictly necessary to run the Service are not covered by the choice above and are never used for tracking. There are two, and both are set together on your first visit to a page that carries a form or a sign-in — the pricing page, or signing up or in — and not anywhere else on the site: a token that protects those forms against cross-site request forgery, and a session identifier, which is linked to your account only once you sign in. Neither identifies you across sites, and neither is shared with anyone.

We use third-party subprocessors to provide the Service, including infrastructure, hosting, analytics, and email delivery providers.

A current list of subprocessors is available at billinghub.online/legal/subprocessors. This list is also available upon request.

8. International Data Transfers

Personal data may be transferred to and processed in the United States and other jurisdictions.

Where required, such transfers are safeguarded using appropriate legal mechanisms, including Standard Contractual Clauses.

9. Security

We use commercially reasonable administrative, technical, and organizational measures to safeguard Personal Data. Our safeguards are aligned with generally accepted industry security standards; however, no method of transmission or storage is completely secure.

10. Your Data-Subject Rights (EEA & UK)

If you are located in the EEA or the United Kingdom, you have the right of access, the right to rectification, the right to erasure, the right to restriction of processing, the right to object, and the right to data portability.

Right to withdraw consent. Where we rely on your consent — which we do for analytics alone — you can withdraw it at any time, as easily as you gave it, with Cookie settings at the foot of every page. Withdrawing does not affect the lawfulness of processing carried out before you withdrew.

How long we take to answer. We respond to a rights request within one month of receiving it. Where a request is complex, or you have made several, we may extend that by up to two further months; if we do, we tell you within the first month and say why.

Where we act as a data controller, requests may be submitted directly to privacy@billinghub.online. Where we act as a data processor on behalf of a customer, such requests should be directed to the relevant customer, in accordance with the applicable agreement and DPA.

You do not need to write to us to exercise the right of deletion: an account holder can delete their own account and its data from Settings. The request is confirmed by a link sent to the account's email address, so that it cannot be actioned by someone who has merely signed in from a stolen session. Records of payments are retained with personal details removed after deletion, where applicable law requires us to keep them. Those records still carry the payment references our payment processor holds, so they are pseudonymised rather than anonymous.

Right to lodge a complaint. You have the right to lodge a complaint with a supervisory authority — in the EEA, in particular the one in the member state where you live, where you work, or where you believe the infringement took place; in the United Kingdom, the Information Commissioner's Office. You do not have to contact us first, though we would welcome the chance to put things right at privacy@billinghub.online.

11. California Privacy Rights (CCPA / CPRA)

California residents have the right to request access, deletion, correction, and information about the processing of their personal information, subject to applicable exemptions.

We do not sell personal information and do not share it for cross-context behavioral advertising.

Requests may be submitted to privacy@billinghub.online.

12. Payments

Payments are processed by third-party payment providers. We do not store full payment card numbers. Payment data is handled in accordance with PCI-DSS standards.

13. Children’s Privacy

The Service is intended for business use and is not directed to children under 18. We do not knowingly collect personal data from children.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.

15. Contact

If you have questions about this Privacy Policy, contact us at privacy@billinghub.online.