The short version
Billable collects the details you use to run your account — your name and email — and the business data you put into it: clients, projects, invoices and the amounts attached to them. We use that data to give you the Service, and nothing shady. We don’t sell it and we don’t spam you. We use Google Analytics to understand how the marketing site and the app are used, and Google Ads to measure whether our ads lead to signups. Both use cookies to recognise return visits and ad clicks. We never share your business data with Google. When the app crashes it sends a technical error report to Sentry, in the EU — no cookies, no invoice contents, and you are identified only by an account ID. Payments are handled by Polar, our Merchant of Record, so we never see your card number. You can export your data yourself at any time, as CSV files, from Settings → Export in the app. To delete it, delete your account from within the Service or contact us through the support form.
This Privacy Policy describes how Mono Software (OPC) Private Limited (“Mono”, “we”, “us”, or “our”) collects, uses, and handles information when you use Billable and any related service (“Service”).
1. Who We Are
Mono Software (OPC) Private Limited is a software company incorporated under the laws of India, based in Nagpur, Maharashtra. We build and operate Billable for international users.
2. Information We Collect
Information you provide:
- Account details such as your name and email address
- Business and financial data you enter into the Service — including clients, projects, invoices, and associated amounts
- Any other information you voluntarily submit through forms or contact channels
Information collected automatically:
- IP address, collected by our hosting infrastructure as part of serving and securing the Service
- Technical error reports generated when something goes wrong in the app (via Sentry) — the error message and stack trace, the browser and operating system, the page you were on, and a short trail of the actions that led up to it
- Usage analytics via Google Analytics — the pages you view, how you arrived (including the campaign tags on the link you followed), and your browser, device type and approximate location derived from your IP address. Google Analytics sets cookies so it can recognise your return visits. It never includes your name, email, or business data
- Advertising conversion data via Google Ads — if you reached us by clicking one of our Google ads, a cookie records that click, and when you sign up the app tells Google Ads that a signup happened, along with your internal account ID so the same signup isn’t counted twice. It never includes your name, email, or business data
- Advertising conversion data via X — if you reached us by clicking one of our X ads, a cookie records that click, and when you sign up the app tells X that a signup happened, along with your internal account ID so the same signup isn’t counted twice. It never includes your name, email, or business data
Error reports are deliberately kept free of your business data. We do not send Sentry your name or email address; a report identifies you only by your internal account ID and organisation ID, which are meaningless outside our own systems. We have turned off Sentry’s collection of IP addresses, cookies and request bodies, and we do not use Sentry’s Session Replay, so no recording is made of your screen. The addresses of requests recorded in an error report are stripped of their query strings before they are sent, so client names, email addresses and other search terms do not travel with them.
We do not collect payment card information. Payment processing is handled entirely by Polar (Polar Software, Inc.), our payment provider and Merchant of Record.
3. How We Use Your Information
We use the information we collect to:
- Provide and operate the Service you signed up for
- Process and verify subscription payments
- Send transactional communications such as receipts and account notices
- Improve and maintain the Service
- Diagnose crashes and technical faults so we can fix them
- Detect and prevent abuse or fraud
We do not sell your personal data. We do not use the business or financial data you enter into the Service for advertising. We use Google Ads to measure how many signups our ads produce, and Google may use that ad-click data to measure and personalise the ads it shows.
4. Third-Party Service Providers
We share data with third-party providers only as necessary to operate the Service. These providers are:
- Polar (Polar Software, Inc.) — our payment provider and Merchant of Record, handling billing, subscription transactions, and sales tax
- Supabase (Supabase, Inc.) — database and authentication, where your account details and the business data you enter are stored
- Cloudflare (Cloudflare, Inc.) — application hosting
- Vercel (Vercel Inc.) — website hosting
- Sentry (Functional Software, Inc.) — error and crash reporting, receiving the technical diagnostic data described in Section 2
- Google (Google LLC) — Google Analytics and Google Ads, receiving the usage, device, approximate-location, IP and ad-conversion data described in Section 2 (using cookies)
- X (X Corp.) — X Ads conversion tracking, receiving the ad-click and signup data described in Section 2 (using cookies)
Each provider operates under their own privacy policy and data processing terms.
5. Data Retention
We retain your data only as long as necessary to provide the Service and meet our legal obligations.
- Business and financial data you create is retained for as long as your account is active
- You may request deletion of your data at any time by contacting us, or by deleting your account from within the Service
- Once you delete your account or request deletion, your data is removed from our systems, including routine backups, within 30 days
- Technical error reports held by Sentry expire on Sentry’s own retention schedule, and are deleted automatically once that period ends. They contain no business data and identify you only by account ID
- Billing and transaction records held by Polar are retained separately for as long as tax and accounting law requires, and are not removed by an account deletion
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Receive a copy of your data in a portable format
You can get a portable copy of your business data yourself at any time: Settings → Export in the app downloads it as CSV files, one per record type. To exercise any of the other rights, contact us through the support form. We will respond within 30 days.
7. Data Transfers
Mono is based in India. Your account details and business data are stored in Supabase’s Singapore region. The application is served by Cloudflare and the website by Vercel, each from its global network, so pages may be delivered from a data center near you.
Some of our providers process data outside Singapore. Polar processes billing and subscription data in the United States. Sentry receives error reports into its European Union region, where they are stored. Google processes analytics and advertising data in the United States and other countries where it operates.
This means your data is transferred and processed outside your country of residence. By using the Service, you consent to this transfer.
8. Children
The Service is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.
9. Security
We take reasonable technical and organisational measures to protect your data from unauthorised access, loss, or misuse. All traffic between your device and the Service is encrypted in transit using HTTPS. No system is completely secure, and we cannot guarantee absolute security.
10. Cookies and Analytics
We use Google Analytics to understand how the Service — the marketing site and the app — is used, and Google Ads to measure whether our ads lead to signups, and the X pixel to measure the same for our X ads. Together they collect the usage, device, location and ad-conversion data described in Section 2, and set cookies on your device to do so. You can block or delete these cookies in your browser settings.
Google Ads and X may set advertising cookies to record that you arrived from one of our ads and to link that click to a signup. We run no other ad pixels or advertising trackers.
Beyond those cookies, the Service uses your browser’s local storage only for strictly necessary purposes — remembering preferences such as your light/dark theme choice. That storage stays on your device, is not a tracking cookie, and is never used to profile you or shared with anyone.
Error reporting works differently. Sentry sets no cookies and does not track you between visits; it only sends a technical report when something in the app actually fails. Because it is strictly necessary to keep the Service working and carries none of your business data, it runs regardless of your cookie settings.
You can also block cookies and trackers in your browser at any time; doing so does not affect your ability to use the Service.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will update the “Last updated” date when changes are made. Continued use of the Service after changes are posted constitutes your acceptance of the revised policy.
12. Contact
For privacy-related questions or requests, contact us at:
Mono Software (OPC) Private Limited
Nagpur, Maharashtra, India
Contact support
team@billable.io
Related