Privacy notice

Who we are

Jonathan Mills, trading as Bivetica Invoice, a sole trader established in the United Kingdom at 28 High Street, Nettlebed, Henley-on-Thames, Oxfordshire, RG9 5DD.

This notice explains how we handle personal information. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

If you have any question about how we handle information, the contact details are at the end of this notice.

The two roles we play

We act in two different capacities, and which one applies changes your rights and who you should approach.

When you open an account with us, we decide how your account, billing, support and security information is handled. For that information we are the one responsible, and you should come to us directly.

When you use the software to record your own customers, employees, contractors and suppliers, you decide what to enter and why. For that information you are responsible and we simply act on your instructions. If you are one of our customer's customers or employees and you want your information changed or removed, please contact that business rather than us. We will help them do it, but the decision is theirs.

What we collect

Account and billing information. Your name, email address, a securely hashed password, your business or trading name, your subscription plan and your payment status. We do not see or store your card number.

The business records you enter. Customers (name, company, contact name, email, phone, billing address and tax number), invoices, quotes, products, expenses, suppliers and payment records.

Employee and contractor information, if you use payroll. This can include name, email, phone, date of birth, gender, National Insurance number, tax code, National Insurance category, student loan plan, pension status and salary. This is sensitive identity information and we treat it accordingly. Contractor records may include a Unique Taxpayer Reference.

Photographs of receipts and invoices, if you use the scanning feature. The picture is stored with the expense as your record of it. Whatever is written on the paper is therefore held too, which may include a shop name, what was bought, and the last four digits of a payment card printed on the receipt.

Enquiries. If you use the contact form we keep your name, email, business name, what you asked about and your message. We store a one-way hash of your IP address to limit abuse of the form, not the address itself.

Technical and security information. Sign-in times, actions taken in the account for audit purposes, and error logs. We do not run analytics or advertising trackers.

Why we use it

To provide the service you have asked for: creating and sending invoices, recording payments, preparing reports and running payroll where you use it.

To take payment for your subscription and keep our own accounting records.

To keep accounts secure, investigate misuse and maintain an audit trail.

To answer your questions when you contact us.

To meet our own legal obligations, including tax and accounting record-keeping.

Where your data is stored

Your data is currently held on servers located in Dallas, Texas, in the United States, operated by our hosting provider Hawk Host Inc. We are planning to move to hosting in the United Kingdom or European Union, and we will tell account holders before that happens.

Separately, if you use the receipt scanning feature, that picture is sent to Anthropic in the United States to be read, and only at the moment you scan it.

We say this plainly because you are entitled to know where your records physically sit. We have never claimed to host in the United Kingdom and we will not.

Disclosing information overseas

Our hosting is in the United States, so your personal information is held overseas.

Australian Privacy Principle 8 requires us to take reasonable steps to ensure an overseas recipient handles your information consistently with the Australian Privacy Principles, and in general we remain accountable to you for what that recipient does with it.

The countries in which your information may be held are the United States, and the United Kingdom where our own business records are kept.

Who else sees it

Hosting. Hawk Host Inc., United States, stores the application and its databases.

Payment providers. Where you connect one, you authorise it on the provider's own website and your merchant account remains yours. Depending on what you enable this may include Stripe, PayPal, GoCardless or an open banking provider such as TrueLayer. Money settles to you, never to us. Payment connections currently run in test mode and go live only after the provider approves your account.

Email delivery. Invoices and notices are sent either from our own mail server or, if you have set it up, from your own business email account using credentials you supply. Those credentials are encrypted.

Reading scanned receipts. If you use the scanning feature, the picture of that receipt is sent to Anthropic, in the United States, which reads it and returns the supplier, date and amount so the expense form can be filled in for you. It is sent only at the moment you scan something. Anthropic does not use it to train its models, and neither do we. If you would rather nothing left the service, type the expense in by hand instead — everything works without scanning.

Accounting software. If you choose to export or connect to Xero, QuickBooks, Sage or Zoho, the data you export goes to them under their terms.

HMRC, for United Kingdom businesses that use the tax features. Live filing is not switched on yet.

Professional advisers and authorities, where we are legally required to disclose.

We do not sell your data. We do not share it for advertising. We do not use it to train artificial intelligence models.

How long we keep it

Account and business records are kept for as long as your account is open. If you close your account, you can export everything first, and you should, because you own it.

After an account closes we keep records for six years where we need them for our own tax and accounting obligations, then delete them.

Receipt photographs are kept with the expense they belong to, for the same six years, because they are the evidence behind the figure.

Enquiry messages are kept for two years.

Security and audit logs are kept for twelve months.

We do not keep data indefinitely without a reason.

How we protect it

Connections to the service use TLS encryption. Passwords are hashed and never stored in a readable form. Email credentials you give us for sending are encrypted individually.

Access inside an account is controlled by role, so a person only reaches the parts of the system their job needs. Employees using the payslip portal can see only their own payslips.

We never ask for card security codes or online banking passwords, and neither will any genuine message from us. If you receive one, it is not from us.

No system is perfectly secure. We tell you honestly what we do rather than promising what we cannot guarantee.

Your rights

Under the Australian Privacy Principles you may ask for access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete or misleading.

Where it is lawful and practicable, you may deal with us anonymously or using a pseudonym — though we cannot run a paid account for you without knowing who you are.

If we refuse access or correction we will tell you why in writing and explain how to complain.

To make any of these requests, email the address at the bottom of this notice. We will respond within the time the law allows and will not charge you for it. We may need to confirm who you are first, so that we do not hand your information to somebody else.

Cookies

We use three cookies and none of them track you.

bivetica_invoice_session keeps you signed in. XSRF-TOKEN protects forms against a common attack. bv_region remembers which country's pricing you chose to look at.

The first two are strictly necessary for the service to work. The third only remembers a choice you made yourself. We run no analytics, no advertising pixels and no third-party trackers, so there is nothing here for you to opt out of.

Children

The service is for businesses. It is not intended for children and we do not knowingly collect information about them.

Changes to this notice

If we change this notice we will update the date at the top. If a change materially affects account holders — a new subprocessor, or a change of hosting country — we will tell them directly rather than relying on them to notice.

How to complain

Please contact us first. We will acknowledge your complaint and respond within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

If a data breach occurs that is likely to result in serious harm, we will assess it and, where the Notifiable Data Breaches scheme applies, notify you and the Commissioner as soon as practicable.

How to contact us

Email hello@bivetica.com and say what you would like us to do. If your question is about records held by a business that uses Bivetica Invoice — an invoice you received, or your payslip — please contact that business first, because they decide what happens to those records and we act on their instructions.

Our regulator for this version of the notice is the Office of the Australian Information Commissioner.