Privacy Policy

Effective October 18, 2026

The short version: we collect only what we need to check your bills. Bank access is read-only. We never sell your data. Delete your account and it’s gone.

What we collect

Account: business name, your name, email, phone, number of locations and the suppliers you pick.

Invoices and orders: the files and emails you upload or forward to your BillCheck address — item codes, descriptions, quantities, prices, fees, dates, invoice and account numbers.

Bank activity: through Plaid, read-only: account name and last four digits, and transactions (date, amount, description). We don’t get or store your bank login, and we can’t move money.

Your rules: agreed prices, fee limits, rebates, locations and supplier rep contacts you enter.

Payments: Stripe stores your card. We only see the brand, last four and whether a charge worked.

Usage: basic logs (time, page, errors) to keep the service running and secure.

How we use it

To match orders, invoices and bank pulls; find differences; build and (if you ask) send claim packets; charge the fees you agreed to; send sign-in links and alerts; and give support. We don’t use your data for advertising, and we don’t sell or rent it.

Who we share it with

Only the services that run BillCheck, each under its own privacy and security terms: Plaid (bank connection), Stripe (payments), Supabase (database), Vercel (hosting), Resend (outgoing email) and Postmark (incoming invoice email). When you send a claim, the supplier rep you chose receives that claim. We’ll disclose data if the law requires it, and we’ll tell you unless we’re not allowed to.

Security

Data is encrypted in transit and at rest. Access is limited to the people who run the service and logged. Sign-in uses one-time email links instead of passwords.

How long we keep it

While your account is open. When you delete it we disconnect your bank in Plaid and delete your invoice lines, orders and transactions right away. We keep payment receipts as long as tax law requires, and backups roll off within 30 days.

Your choices

You can see and download your findings, change your rules, disconnect your bank, turn claim sending off, or delete everything from Settings. Email hello@turnnet.network to ask for a copy of your data or anything else here. BillCheck is for businesses and isn’t meant for children.

Changes

If we change this policy we’ll post it here and email you before material changes take effect.