Privacy Policy
Last updated: November 2026
1. Information We Collect
When you create an account, we collect your email address, a hashed version of your password, your display name, and your chosen colour and PIN (stored as a secure hash). During signup, your details are held temporarily in an unverified, pending state while we confirm your email address by a one-time code or verification link — see "Data Retention" below for how long this is kept. When you use the Service, we collect the financial entries you log — descriptions, amounts, categories, dates, and payment modes — and any custom expense categories you create (a name and colour you choose). If you subscribe to Bilanceo Plus, we additionally collect your subscription status, billing cycle (monthly or yearly), and identifiers Razorpay assigns to your subscription and customer record — see "Payments and Subscriptions" below for what this does and does not include. We also collect basic usage information such as session tokens stored in secure HTTP-only cookies.
2. How We Use Your Information
We use your information solely to provide and improve the Bilanceo Service. This includes authenticating your identity, delivering your workspace data to you and your partner, processing and managing your Bilanceo Plus subscription, sending email notifications you have opted into (such as expense alerts and budget warnings), and providing monthly summary reports. We do not use your financial data for advertising, profiling, or any purpose other than operating the Service.
3. Data Storage and Security
Your data is stored in a secure PostgreSQL database, which maintains industry-standard security practices including encryption at rest and in transit. Passwords and PINs are never stored in plain text — they are hashed before being stored. Session tokens are stored in HTTP-only, Secure, SameSite cookies. We implement rate limiting on all authentication endpoints to protect against brute force attacks. Payment card, UPI, and net-banking details are entered directly on Razorpay's own secure, PCI-DSS-compliant payment page — they are never transmitted to or stored on Bilanceo's servers.
4. Workspace Isolation
Each workspace is strictly isolated. Your financial data — expenses, budgets, and recurring items — is only accessible to users who are members of your specific workspace — the owner and their one invited partner. No other user, including Bilanceo staff, can browse or access your workspace's financial entries through the application interface. Database-level row security policies enforce this isolation. The narrow exception is subscription and billing records: a small number of authorised Bilanceo staff can access these specifically to process refunds, resolve payment issues, or provide support you request, and every such access is logged in an internal audit trail.
5. Email Communications
We send transactional emails necessary for the Service to function, including sign-up verification codes and links, password reset links, PIN reset links, billing or payment confirmations for Bilanceo Plus, and a notice before your Bilanceo Plus free trial ends. With your consent (configured in workspace settings), we also send expense notifications, budget alerts, and a weekly spending summary report to your registered email address. You can disable optional email notifications at any time from your workspace notification settings. We never send marketing emails without explicit opt-in.
6. Payments and Subscriptions
Bilanceo Plus is a paid subscription (₹79/month or ₹699/year) processed through Razorpay, a licensed Indian payment aggregator. When you subscribe, your name and email are shared with Razorpay to create your subscription; your card, UPI, or bank details are collected and processed entirely by Razorpay on its own payment page, under its own security and privacy practices — Bilanceo never sees, transmits, or stores your full card number, CVV, UPI PIN, or bank credentials. We store only what Razorpay returns to identify and manage your subscription: a customer ID, a subscription ID, your plan, billing cycle, status, and renewal dates. Razorpay notifies us of payment events (such as a successful charge, a failed renewal, or a cancellation) through secure, signature-verified webhooks, which we log to keep your subscription status accurate and to support refund or billing enquiries. Subscriptions renew automatically until cancelled; you can cancel anytime from Workspace Settings, which takes effect at the end of your current billing period. Refunds are not automatic and are handled case-by-case — contact us at contact@bilanceo.com.
7. Data Sharing
We do not sell, rent, trade, or share your personal information with third parties for their marketing purposes. We use the following sub-processors to operate the Service: Supabase (database hosting and authentication infrastructure), our email provider's SMTP servers (currently GoDaddy's mail servers, for transactional email delivery), Razorpay (payment processing for Bilanceo Plus subscriptions — see "Payments and Subscriptions" above), and Vercel (application hosting). Each sub-processor is bound by their own privacy commitments and processes only the minimum data necessary to provide their service.
8. Data Retention
We retain your account data and workspace entries for as long as your account is active. If you delete your account or workspace, your data is permanently deleted from our database within 30 days, except where we are required to retain certain records for legal or compliance reasons. Signup details are held only in a temporary, unverified state while you complete email verification; if verification is not completed, that pending record automatically expires and is deleted within 24 hours. Records of subscription and payment events (such as billing dates, amounts, and Razorpay-issued identifiers — never full card or bank details, which we never hold) may be retained for longer than 30 days where Indian tax, accounting, or financial record-keeping law requires it, even after your account or workspace is deleted. Authentication tokens and session data are automatically expired and purged on a rolling basis.
9. Your Rights
You have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your account and associated data, and export your expense data at any time using the CSV export feature within the application. To exercise any of these rights, contact us at contact@bilanceo.com and we will respond within 30 days.
10. Cookies
We use a single essential cookie — the session cookie — to maintain your logged-in state. This cookie is HTTP-only (not accessible to JavaScript), Secure (HTTPS only), and SameSite strict (not sent with cross-site requests). We do not use any tracking, advertising, or analytics cookies, and no third-party cookies are set by Bilanceo itself. The one exception: if you choose to upgrade to Bilanceo Plus, we load Razorpay's own checkout script to process payment, which may set cookies of its own for payment processing and fraud prevention — these are governed by Razorpay's privacy policy, not ours, and are only loaded if you start a checkout.
11. Children's Privacy
Bilanceo is not intended for individuals under the age of 18. Under India's Digital Personal Data Protection Act, 2023, anyone under 18 is a "child," and processing a child's personal data requires verifiable consent from a parent or lawful guardian. We do not have a mechanism to collect or verify such parental consent, so the Service is not intended for use by children and we do not knowingly collect personal data from them. If we become aware that a person under 18 has created an account or provided personal data without verifiable parental consent, we will delete the associated account and data promptly. If you believe a child has provided us with personal information, please contact us.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or through a notice in the application. The date at the top of this page indicates when the policy was last updated. Continued use of the Service after changes take effect constitutes your acceptance of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at contact@bilanceo.com. We take privacy seriously and will respond to all enquiries promptly.
Questions about your privacy or data?
contact@bilanceo.com