California Consumer Privacy Act (CCPA) Notice
Last updated: February 2026
This notice supplements our Privacy Policy and applies specifically to California residents as required by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act ("CCPA/CPRA").
1. Categories of Personal Information Collected
In the preceding 12 months, we have collected the following categories of personal information from consumers:
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Name, email address, username, IP address | Yes |
| Customer Records | Name, address, phone number, payment information | Yes |
| Commercial Information | Subscription history, transaction records, invoices created | Yes |
| Internet / Network Activity | Browsing history within the Service, feature usage, interaction data | Yes |
| Geolocation Data | Approximate location derived from IP address | Yes |
| Professional Information | Company name, business address, client and project details | Yes |
| Sensory Data | Company logos or images uploaded to the Service | Yes |
| Sensitive Personal Information | Account login credentials | Yes |
2. Sources of Personal Information
We collect personal information from the following sources:
- Directly from you: information you provide when registering, creating content in the Service, or contacting support
- Automatically: usage and device information collected when you interact with the Service
- Third parties: payment confirmation data from our payment processor (Stripe)
3. Business Purposes for Collection
We collect and use personal information for the following business purposes:
- Providing and maintaining the Service, including account management, time tracking, invoice generation, and email delivery
- Processing transactions and sending related notifications
- Responding to customer support inquiries
- Detecting and preventing security incidents, fraud, and abuse
- Debugging and repairing errors in the Service
- Analyzing usage to improve and develop new features
- Complying with legal and regulatory obligations
4. Sale and Sharing of Personal Information
We do not sell personal information as defined by the CCPA. We do not share personal information for cross-context behavioral advertising purposes.
5. Disclosure of Personal Information
In the preceding 12 months, we have disclosed the following categories of personal information for business purposes:
| Category Disclosed | Recipients |
|---|---|
| Identifiers | Cloud hosting providers, email delivery services |
| Customer Records | Payment processor (Stripe) |
| Commercial Information | Payment processor (Stripe) |
| Internet / Network Activity | Cloud hosting providers, analytics services |
6. Your Rights as a California Resident
Under the CCPA/CPRA, California residents have the following rights:
- Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of collection, the business purposes, and the categories of third parties with whom we share it.
- Right to Delete: You may request that we delete the personal information we have collected from you, subject to certain exceptions (such as data needed to complete a transaction or comply with legal obligations).
- Right to Correct: You may request that we correct inaccurate personal information we hold about you.
- Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information, so this right does not currently apply.
- Right to Limit Use of Sensitive Personal Information: You may request that we limit our use of sensitive personal information to purposes necessary to provide the Service.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. You will not receive different pricing, quality of service, or access based on exercising your privacy rights.
7. How to Exercise Your Rights
You or your authorized agent may submit a request by:
- Emailing us at privacy@byllr.com
We will verify your identity before processing your request by confirming information associated with your account. We will respond to verifiable requests within 45 days. If we need additional time, we will notify you of the reason and extension period (up to an additional 45 days).
8. Authorized Agents
You may designate an authorized agent to submit requests on your behalf. We may require the agent to provide proof of written authorization and may still verify your identity directly.
9. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this notice, unless a longer retention period is required or permitted by law. For details, see the Data Retention section of our Privacy Policy.
10. Opt-Out Preference Signals
We respect browser-based opt-out preference signals such as the Global Privacy Control (GPC). When we detect a GPC signal from your browser, we will treat it as a valid opt-out request for that browser.
11. Children Under 16
We do not knowingly collect or sell personal information of consumers under 16 years of age.
12. Changes to This Notice
We may update this CCPA Notice periodically. Material changes will be communicated through the Service or via email. The "Last updated" date above indicates the most recent revision.
13. Contact Us
For questions about this CCPA Notice or to exercise your rights, contact us:
- Email: privacy@byllr.com