BillVigil Privacy Policy
Effective 3 October 2026
BillVigil helps you find your subscriptions in a bank statement, decide what to keep, and get warned before you are charged. This policy explains what we collect and what we do with it. BillVigil ("we") is the controller of your data. Contact us at info@billvigil.com.
Our privacy promise
Your statement is read on your device and the file is never uploaded. We save only the transaction date, merchant and amount, with account numbers removed. You can delete everything at any time.
What we store
- Your account: your email address and an encrypted password.
- Your transactions: the date, merchant name, amount and whether money went in or out. Before saving, we remove IBANs, account numbers, card numbers and long reference numbers. Transfers to or from a person are saved as "Transfer" with the amount, without the person's name.
- Your subscriptions: name, price, billing cycle, charge dates, and your choices such as Keep or Cancel.
- Your settings: reminder preferences, statement labels you type, and the date you accepted these terms.
- Payments: if you buy a paid plan, our payment provider handles your card details. We never see or store your card number. We keep a record of your plan and payment status.
What we never store
The statement file, the name and address printed on it, your IBAN, your account and card numbers, and your balances.
Why we use your data
- To provide the service you signed up for: showing your subscriptions and spending, and sending the reminders and checks you asked for. The legal basis is our contract with you.
- To keep the service secure and prevent misuse. The legal basis is our legitimate interest in running a safe service.
- To meet legal duties, such as keeping payment records.
We do not sell your data, use it for advertising, or share it with the merchants on your statement.
Who can see your data
Other users can never see your data. A small number of people who operate BillVigil can access stored data when needed to run and support the service, and are bound to keep it confidential.
We use trusted service providers to run BillVigil: Supabase (database and sign-in), Lovable (website hosting), Resend (email delivery), cron-job.org (scheduling, which receives no personal data) and Stripe (payments). They process data only on our instructions. Some may process data outside the European Economic Area, in which case approved safeguards such as standard contractual clauses apply.
How long we keep it
We keep your data until you delete it. "Manage my data" in Settings lets you delete chosen statements with their transactions, or "Delete everything" to remove your transactions, subscriptions, statements and reminders immediately. To delete your account as well, email info@billvigil.com and we will do so within 30 days. Payment records are kept for as long as the law requires.
Cookies
We use only the storage your browser needs to keep you signed in and remember your display settings. We do not use advertising or tracking cookies.
Your rights
You can ask to see, correct, export or delete your data, and to restrict or object to how we use it. Email info@billvigil.com and we will reply within 30 days. You also have the right to complain to the data protection authority in your country.
Age
BillVigil is for people aged 18 or over.
Changes
If we change this policy in a way that affects you, we will email you before the change takes effect.