Privacy notice
Last updated: 25 October 2026
Manage optional content using Cookie settings at the bottom of the page. See our Cookie policy for storage details and choices.
About this notice
Bill & Bind provides invoicing, contracts and business administration tools. Contact support@billandbind.com for privacy questions or requests. This notice covers visitors, account holders and people whose information appears in documents handled through the service.
Information we handle
We receive account and business details, email addresses, password hashes, customer contact details, invoices, contracts, signatures, uploaded files, messages submitted to AI tools, subscription records and payment status. We also record technical and security information, such as IP addresses and document viewing or signing activity. Information may come from you, the business sending you a document, invited team members or payment providers. Account and authentication details are needed to provide an account; optional content depends on the features you use.
Why we use information
We use account information to provide the service and support under our agreement with you. We use security and operational information for our legitimate interests in protecting accounts, preventing misuse and keeping the service reliable. We use records where necessary to meet legal obligations. Where processing requires consent, you can withdraw it by contacting support; this does not affect earlier lawful processing. Businesses using Bill & Bind decide why they put their own customer information into invoices and contracts. For that content, Bill & Bind processes information to deliver the tools on their behalf; contact the sending business about its own use of your information.
Service providers and sharing
Namecheap hosts the website and provides email delivery. Stripe processes subscriptions and connected-business payments; its payment forms handle card details. OpenAI processes content submitted to AI features. Cloudflare R2 stores encrypted backups. Healthchecks.io receives service check-in status for outage monitoring, without customer records. Information is also available to authorised members of your business and intended document recipients. We may disclose information where required by law or necessary to investigate misuse. We do not sell customer information.
AI and document activity
Using an AI feature can send the relevant prompt, invoice details, receipt or document content to OpenAI. Avoid unnecessary sensitive information and review outputs before using them. AI requests are configured not to store response history, but this is not a promise that the provider retains no data for security or legal purposes. Document links and email tracking can record when a document is viewed or an email image is loaded; email privacy tools can make these signals inaccurate. Treat sharing and signing links as confidential.
Cookies and international processing
The service uses cookies needed for sign-in and account security, together with browser preferences. Stripe may use cookies when its payment tools are loaded. Blocking essential cookies can prevent sign-in or payment features working. Our providers may process information outside the UK, including in the United States; the service is not presented as UK-only storage. Contact support for details of the providers and transfer arrangements relevant to your information.
How long information is kept
Account and business records are kept while needed to provide your account and the features you use. You can export account data and request deletion. Deleting an owner account also removes its owned businesses and associated database records; export needed records and cancel paid subscriptions first. Uploaded files and provider-held records may need separate review as part of a deletion request. Encrypted backup copies are scheduled to expire after 31 days and cannot be removed individually during their protection period. Operational web logs rotate after 14 days and system logs after 30 days. Support, transaction or security records may be retained longer where needed to resolve a dispute, investigate misuse or meet a legal obligation; the reason and applicable period can be explained on request.
Your choices and rights
Depending on the circumstances, you can request access, correction, deletion, restriction or a portable copy of your personal information. You can object to processing based on legitimate interests by emailing support@billandbind.com. We may need to verify your identity before acting. If a business supplied your information, we may direct the request to that business or help it respond. You may complain to the UK Information Commissioner at ico.org.uk/make-a-complaint, or your relevant data protection authority. Contacting us first is optional.
Changes and contact
We will update the date on this page when the notice changes and highlight material changes where appropriate. For privacy requests, email support@billandbind.com and describe the request without including passwords or full card details.