This Privacy Policy explains how RedBill ("RedBill", "we", "us") handles personal data when you visit our websites, create an account, or use the RedBill cloud POS and retail ERP platform (the "Service"). It applies worldwide; where local law (such as the EU/UK GDPR, or comparable regimes) gives you additional rights, we honour them.

1. Who is responsible

For your account and website data, RedBill is the data controller. For the business and customer data you enter into the Service to run your shop ("Customer Data"), you are the controller and RedBill is your processor, acting on your instructions under our Terms & Conditions.

2. Data we collect

Account data: name, email, phone, business name, country, password (stored hashed where applicable), and billing details.
Usage data: log records, device and browser type, IP address, pages viewed and feature usage, for security and product improvement.
Customer Data: the products, sales, invoices, inventory, suppliers, employees and customer contacts you choose to store in the Service.
Support data: messages, attachments and feedback you send us.

3. How we use data

To provide, secure, maintain and improve the Service.
To process payments and manage subscriptions and metered add-ons.
To communicate about your account, service changes, security and support.
To detect, prevent and investigate fraud, abuse and security incidents.
To comply with legal obligations.

We do not sell personal data, and we do not use Customer Data to train AI models.

4. Legal bases (where GDPR-style law applies)

Performance of a contract (providing the Service), legitimate interests (securing and improving the Service), consent (optional marketing, non-essential cookies), and legal obligation (tax and accounting records).

5. Sharing

We share data only with: infrastructure and hosting providers; payment gateways you or we use; messaging carriers and email providers for notifications you send; optional AI providers when you enable AI features using your own key; and authorities where legally required. All processors are bound by contractual data protection terms.

6. International transfers

RedBill operates globally and data may be processed in countries other than yours. Where required, we use appropriate safeguards such as standard contractual clauses for such transfers.

7. Retention

Account and Customer Data are retained while your account is active and for up to 30 days after termination to allow export, after which they are deleted or anonymised, except where longer retention is required by law. Backups are rotated on a rolling schedule.

8. Security

TLS encryption in transit, HSTS, per-tenant isolation enforced at the query layer, role-based access, audit logging, and regular backups. No system is perfectly secure; we will notify you and any regulator of a qualifying breach as required by law.

9. Your rights

Subject to local law, you may request access, correction, deletion, restriction, portability, or object to certain processing, and withdraw consent. For Customer Data held on behalf of a business, contact that business (the controller). To exercise rights regarding data RedBill controls, email privacy@redbill.app. You may also complain to your local supervisory authority.

10. Cookies

We use strictly necessary cookies to run the Service and optional analytics cookies. See our Cookie Policy.

11. Children

The Service is for businesses and is not directed to children under 16. We do not knowingly collect their data.

12. Changes and contact

We will post changes here and, for material changes, notify you by email or in-app notice. Contact: privacy@redbill.app.

Privacy Policy