Legal

Privacy Policy

Last updated: October 7, 2026

Your privacy matters to us. This Privacy Policy explains how we collect, use, and protect your information when you use Billable to manage timesheets and invoices.

Who we are

Billable is made by Harbor Apps LLC, a Minnesota company. For anything in this policy, write to billable.to@gmail.com.

1. What Information We Collect

We collect the following information to provide and improve our services:

Information You Provide

  • Account Information: Your name, email address, and sign-in details when you sign up.
  • Billing Information: Business name, client details, invoice data, time entries, and other information you input.
  • Uploads: Spreadsheets, photos and documents you import, and data you pull from a connected time-tracking account.
  • Communications: Any messages or support requests you send us.

Automatically Collected Data

  • Usage Data: Pages visited, features used, and actions taken.
  • Device Info: Browser type, operating system, and IP address.

2. How We Use Your Information

We use your data to:

  • Provide and improve our timesheet and invoicing tools.
  • Send you necessary service emails (like updates or billing notices).
  • Respond to support requests and feedback.
  • Ensure security and prevent misuse.

We do not sell your data.

3. Sharing Your Information

We only share your data in limited situations:

  • With service providers who help us operate, such as hosting, database, payment, email, analytics and AI model providers. Every one of them is listed on our subprocessors page, with what it does and where it runs.
  • When required by law or to protect our rights.
  • With your consent.

4. Automated processing and AI service providers

Billable uses machine learning models to power the Assistant, to import data from spreadsheets and connected time-tracking tools, and to read photos of paper timesheets and invoices. The models are run by third-party providers listed on our subprocessors page.

What we send

Only the content needed for the task. For the Assistant, names, notes, email addresses, phone numbers and street addresses are replaced with stand-ins (such as "Client 3") before the request is sent, and restored after. For spreadsheet imports, only the column headings and up to five sample rows are sent so the model can match columns; the rest of the file never leaves Billable. Imports from a connected tool do not use a model at all. For photos and scanned documents, the image is sent as taken, because the model has to read it, and Billable does not keep a copy. The feature shows a notice before you choose that option.

What providers may do with it

Nothing except answer the request. Each provider has agreed in writing not to use your content to train its models and not to retain it beyond the time needed to process the request. We route every request only to provider endpoints that meet both conditions.

What we do with it

We never use your content, or your clients' information, to train machine learning models. We do not sell it. We do not share it with anyone beyond the providers on the subprocessors page.

How long we keep uploads

The original file or photo is kept while the import is in progress and for 30 days afterwards so you can undo it or ask us for help. Then it is deleted. The clients, time entries and invoices you confirm from an import are ordinary records and are kept like any other data in your account. You can delete an upload sooner from the import screen.

Review and accuracy

Nothing extracted by a model is saved until you confirm it. Models make mistakes, and you should check the result against the original.

People in your files

Uploaded documents often describe people other than you (your clients, their matters, patients). We process that information only on your instructions and only to provide the service to you. If one of them asks about their information, we will refer them to you and help you respond.

Turning it off

You can stop using AI features at any time, and a team admin can turn them off for the whole team. We will tell you by email and in the app at least 30 days before we add a provider or change what we send.

Health and legal information

Billable is not a HIPAA business associate and does not sign business associate agreements. Do not upload protected health information unless you have confirmed with us in writing that your account is on a provider path that supports it.

5. Data Security

We use industry-standard security measures to protect your data. However, no method of transmission over the internet is 100% secure, so we cannot guarantee absolute security.

6. Your Rights

Depending on your location, you may have rights to:

  • Access your data
  • Correct inaccurate data
  • Delete your data
  • Object to certain processing

Contact us to exercise these rights. You can also delete any upload from the import screen, and deleting your account removes stored originals.

7. Changes to This Policy

We may update this policy occasionally. We will notify you of significant changes via email or through the service, and the date at the top of this page changes whenever the text does.

8. Contact Us

Questions about this policy? Contact us at billable.to@gmail.com.