Privacy Policy

Who we are

BillJean ("BillJean," "we," "us") builds software applications ("Apps") that connect customer relationship management (CRM) platforms, such as Salesforce and Pipedrive, with billing and accounting services, such as Stripe and QuickBooks. We also operate the website at billjean.com (the "Site").

This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have. It applies to the Site and to every BillJean App, wherever it is distributed, including through third-party marketplaces.

Information we collect

Information you provide to us

• Contact details such as your name, email address, company and message content when you email us or request support.
• Account and configuration details such as the name and email of the administrator who installs an App, your CRM organization or company identifier, and the settings you choose.

Information we access through connected services

When an authorized user installs an App and connects it to a CRM, Stripe or QuickBooks, we access data from those services through their official APIs, limited to the permissions (scopes) that were granted. Depending on the App and the features used, this may include:

• CRM data: account, contact, deal or opportunity records, user names, email addresses and roles, and the record identifiers needed to link billing data to the right record.
• Stripe data: customers, invoices, credit notes, charges, payments, refunds, subscriptions, products and prices, plus limited payment-method details that Stripe provides, such as card brand, last four digits and expiry date. We never receive or store full card numbers or security codes.
• QuickBooks data: customers, invoices, payments, credit memos, estimates, items and related company details.
• Authorization tokens issued by those services so the App can act on your behalf. We do not collect your passwords for any connected service.

We refer to this information collectively as "Customer Data."

Information collected automatically

• Usage and log data such as IP address, browser type, pages or App features used, timestamps, and error reports. We use it to operate, secure and debug the Site and Apps.
• Cookies: the Site does not use advertising or cross-site tracking cookies. See Cookies below.

How we use information

We use information to:

• provide, operate and maintain the Apps, including displaying, creating and updating billing records at your direction;
• link CRM records with the matching Stripe or QuickBooks records;
• authenticate users, enforce the permissions set by your administrators, and keep the service secure;
• respond to support requests and communicate with you about the service, including service and security notices;
• monitor performance, diagnose problems and improve the Apps, using aggregated or de-identified information where practical;
• comply with legal obligations and enforce our Terms of Service.

We do not sell Customer Data, use it for advertising, or use it to build profiles of individuals. We do not use Customer Data obtained from connected services to train generalized artificial-intelligence or machine-learning models.

Our role with Customer Data

For Customer Data processed through the Apps, the business that installs the App (our "Customer") decides what data is connected and how it is used. We process that data on the Customer's behalf and according to its instructions, as a "service provider" or "processor" under applicable law. If you are an individual whose information appears in a Customer's CRM or billing system, please contact that Customer first. We will help them respond to your request.

How we share information

We share information only as described below:

• With the connected services you authorize. For example, when you create an invoice from your CRM, we send the necessary details to Stripe or QuickBooks.
• With service providers who help us run the service, such as cloud hosting, infrastructure, email and error-monitoring providers. They are bound by contracts that limit their use of the data to providing services to us.
• For legal reasons, if we believe in good faith that disclosure is required by law, subpoena or other legal process, or is necessary to protect the rights, property or safety of BillJean, our customers or others.
• In a business transfer, such as a merger, acquisition or sale of assets, subject to this Policy's protections.
• With your consent or at your direction.

Third-party platforms

The Apps run inside, and connect to, services operated by other companies, including CRM providers (such as Salesforce and Pipedrive), Stripe and Intuit (QuickBooks), and the marketplaces where our Apps are listed. Their handling of your information is governed by their own privacy policies and terms. We encourage you to review them. BillJean is not affiliated with or endorsed by these companies.

Data retention and deletion

• We keep Customer Data only while an App is installed and connected, or as long as needed to provide the service.
• When an App is uninstalled or a connected service is disconnected, we revoke or discard the related authorization tokens and delete the associated Customer Data from our active systems within 30 days. Residual copies in encrypted backups are overwritten in the normal backup cycle, within 90 days.
• We keep support correspondence and limited business records for as long as reasonably necessary for the purposes described here or as required by law.

You may request earlier deletion at any time by emailing hello@billjean.com.

Security

We use administrative, technical and physical safeguards designed to protect information, including encryption in transit (TLS) and at rest, access controls based on least privilege, and secure storage of authorization tokens. No system is perfectly secure, and we cannot guarantee absolute security. If we learn of a security incident affecting your information, we will notify affected Customers as required by law.

To report a vulnerability, email hello@billjean.com.

Your choices and rights

• Disconnect at any time. You can revoke BillJean's access from your CRM, Stripe or QuickBooks settings, or by uninstalling the App.
• Access, correction and deletion. Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, and to object to or restrict certain processing.
• Marketing emails. If we ever send marketing emails, you can unsubscribe using the link in the email. We will still send service-related messages.

To make a request, email hello@billjean.com. We will verify your request and respond within the time required by applicable law. We will not discriminate against you for exercising your rights.

California privacy rights

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), gives you the following rights regarding personal information we handle as a business:

• to know the categories and specific pieces of personal information we collect, the sources, the purposes, and the categories of third parties we disclose it to;
• to delete personal information, subject to certain exceptions;
• to correct inaccurate personal information;
• to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined in the CCPA, and we have not done so in the preceding 12 months;
• to limit the use of sensitive personal information. We do not use sensitive personal information for purposes that require this right to be offered;
• to not receive discriminatory treatment for exercising these rights.

In the past 12 months we have collected the categories of personal information described in Information we collect: identifiers (such as name, email and IP address), commercial information (such as invoice and transaction records), internet or network activity, and professional information (such as company and role). We collect it from you, from connected services, and automatically, for the business purposes described in How we use information.

You or an authorized agent may submit a request by emailing hello@billjean.com. We may need to verify your identity before fulfilling the request. Under California's "Shine the Light" law, you may also request information about disclosures to third parties for direct-marketing purposes. We do not make such disclosures.

International users

BillJean is based in the United States, and information is processed in the United States and other countries where we or our service providers operate. If you are in the European Economic Area, the United Kingdom or Switzerland, we process personal information on the basis of performing our contract with the Customer, our legitimate interests in operating and securing the service, compliance with legal obligations, or consent where required. Where required, we rely on appropriate safeguards, such as Standard Contractual Clauses, for international transfers. You may also lodge a complaint with your local data-protection authority.

Children

The Site and Apps are designed for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

Cookies

The Site uses only cookies and similar technologies that are strictly necessary to deliver and secure it, such as those set by our hosting and content-delivery provider to prevent abuse. We do not use advertising or cross-site tracking cookies. Inside the Apps, we may use session storage strictly necessary to keep you signed in and remember your settings.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify Customers by email or in the App before the changes take effect.

Contact us

Questions or requests about this Privacy Policy can be sent to: