Privacy Policy
Last updated: 9 July 2025
1. Who We Are
BuildBill (“we”, “us”, “our”) turns voice notes sent via WhatsApp into ready-to-send PDF invoices for construction projects. For GDPR purposes we are the controller of your personal data.
2. What Data We Collect
- WhatsApp chat content – voice messages, transcripts, text, file attachments.
- Account details – name, email address, phone number, password (hashed).
- Invoice data – client names, addresses, line-items, prices.
3. Why We Collect It (Legal Basis – GDPR Art. 6)
- Contract (Art. 6 b) – to generate and store your invoices.
- Consent (Art. 6 a) – to send you WhatsApp messages; you can withdraw by replying “STOP”.
- Legitimate interest (Art. 6 f) – to secure the service and prevent abuse.
4. How We Use & Don’t Use Your Data
- Store WhatsApp content so you can download past invoices.
- Generate PDF invoices—we do not train AI models on your data.
- Provide support and troubleshoot bugs.
- We never sell or share your data for advertising.
5. Data Retention & Deletion
Delete your account any time from Account → Settings. All personal data and WhatsApp messages are automatically purged 30 days after deletion (Dutch tax rules require you to keep issued invoices for seven years, this is your own responsibility we do not keep your data after deletion). Need it gone sooner? Email support@buildbill.com and we’ll expedite within 72 hours.
6. Security
- Traffic encrypted in transit via TLS 1.3, HSTS enforced.
- Data encrypted at rest (AES-256) in EU data-centres.
- Role-based access; engineers see anonymised logs only.
7. Where Your Data Is Processed
Primary storage is in the EU. WhatsApp message content also transits Meta Platforms Ireland Ltd. in the EU, subject to their WhatsApp EEA Privacy Policy.
8. Your Rights
- Access, correct, erase, or port your data.
- Object to or restrict certain processing.
- Complain to your local data-protection authority.
To exercise any right, email support@buildbill.com. We reply within 14 days.
9. Children
BuildBill is for users aged 18 and over. We do not knowingly collect data from minors.
10. Changes to This Policy
We’ll post any updates on this page and, for material changes, notify you in-app or via email at least 7 days before they take effect.