Privacy at BillGuarded
Last updated: September 27, 2026.
Information we process
BillGuarded processes the company and work-email information you submit, billing documents and commercial terms you upload, audit or Proof Scan results generated from those documents, billing records needed for paid services, and a record of when you accepted the current Terms and Privacy Notice. We also receive standard operational data needed to protect and run the service, such as request metadata and delivery events.
How we use information
We use submitted information to create your private workspace, validate uploads, normalize supported records when needed, reconcile billing data, present findings, generate customer-requested dispute drafts, process paid services, provide support, document your service authorization, prevent abuse, and operate and improve the service. We do not use uploaded records to make unsupported accusations or guarantee a recovery.
Assisted normalization
CSV records that satisfy the deterministic engine's evidence requirements can be processed automatically. Other supported formats, including PDF and spreadsheet records, may be held for a secure assisted normalization pass before BillGuarded makes an evidence-backed billing conclusion. Uploaded records remain subject to the same private storage and server-side access controls while awaiting review.
Privacy-safe product measurement
BillGuarded records a limited first-party funnel ledger so we can see whether visitors reach the demo, Proof Scan, intake, upload, Checkout, audit, and delivery stages. This ledger uses a one-way hash of a random browser identifier and allowlisted source labels. It does not store invoice or rate-card contents, filenames, billing rows, raw email addresses, company fields, Checkout Session IDs, Stripe customer IDs, recovery credentials, URL query strings, or URL fragments.
Service providers
BillGuarded relies on infrastructure and service providers including Vercel for application hosting, Supabase for database and private file storage, Stripe for paid-service billing, and Resend for business email. Each provider processes information as needed to perform its role.
Document access and retention
Customer documents are stored in a private storage bucket and are accessed through server-side controls or short-lived signed upload access. We retain information for as long as reasonably necessary to provide the service, preserve an audit trail, resolve disputes, protect the service, and meet applicable legal obligations. Abandoned intake workspaces may be removed automatically after a short retention window.
Private result access
Paid audits and Free Proof Scans use separate private access credentials. Recovery links are bearer credentials and should not be forwarded or published. BillGuarded keeps recovery surfaces out of search indexes and avoids placing those credentials in ordinary query strings.
Your choices
You may contact us to ask about access, correction, or deletion of information associated with your workspace, subject to records we must retain for legitimate business or legal reasons.
Contact
Privacy questions can be sent to support@billguarded.com.