Privacy Policy

This Privacy Policy applies to personal information processed by deezbills inc. ("deezbills," "we," "us," or "our"), including through our website, the deezbills application, and any related services. We may revise this Privacy Policy from time to time. If there are material changes, we will notify you as required by applicable law. If you continue to use our services after the updated Privacy Policy takes effect, you will be deemed to have accepted the changes.

We collect information you provide when creating your account and using deezbills, including your name, email address, password, phone number (if you enable SMS), and timezone. Conversational onboarding asks for your name and birth date. As you use deezbills, you may provide demographic, household, and financial planning information through Fred or account settings, such as your city, province or state, country, housing situation, monthly housing cost, number of adults and children living with you, vehicle and pet ownership, spending personality, student status, employment type, financial goals, financial confidence, income stability, debt situation, and emergency fund status. For conversational planning, we store plan profile records, accepted plan candidate metadata, proposal and goal attribution records, and shared-plan partner estimate or no-income assumptions when applicable. We also collect the financial information you enter into the service, including account details, expenses, income sources, budgets, and goals. If you connect your Gmail account, deezbills accesses limited Gmail message data needed to identify financial emails, including message headers, sender information, subject lines, body text, and structured data embedded in messages. If you separately enable Gmail for Fred, relevant message content and supported attachments may also be accessed to help with your financial tasks and decisions. If you enable SMS, we record your consent timestamp and IP address for compliance purposes. We automatically collect usage data through cookies, local storage, and sessions.

We use your IP address to estimate your country and show relevant examples, calculator defaults, and subscription prices. This does not set your financial profile or tax jurisdiction. You can change the country in supported public calculators. Fred and your account settings use the financial information you provide when your actual jurisdiction is needed. We do not request precise device location for this purpose.

We use your information to operate and improve the service, authenticate your identity, process web payments through Stripe and iOS subscriptions through Apple and RevenueCat, send account notifications and security alerts, deliver SMS messages you have opted into, power AI features such as Fred (expense categorization, financial insights, document parsing, and conversational financial assistance), personalize your experience based on your financial profile and preferences, and comply with legal obligations. For connected Gmail accounts, we use Gmail data only to identify financial documents, extract and normalize relevant billing or transaction details, create user-facing records in the app, prevent duplicate imports, maintain audit and security logs, support connection management, retry, and deletion workflows, and, when separately enabled, help Fred answer your financial questions using relevant messages and attachments. We may also use your information to send service-related emails such as payment confirmations, billing reminders, and security notifications.

We share your information with third-party service providers solely to operate the service. These providers include cloud infrastructure providers for hosting and data storage, artificial intelligence providers, including OpenAI, for powering Fred and other AI features (we may change providers), Stripe for web payment processing, Apple for App Store purchases, RevenueCat for iOS subscription and entitlement management, Twilio for SMS delivery, Resend for email delivery, Google for authentication (OAuth), and Cloudflare for bot protection, security, and abuse prevention. For Gmail-connected accounts, relevant Gmail content and derived financial metadata may be processed by infrastructure and artificial intelligence service providers acting on our behalf solely to provide the user-facing features of deezbills. We do not sell Gmail data or other personal information. We do not use Gmail data for advertising, and we do not use Gmail data to train third-party AI models. We do not allow humans to read Gmail data except with your affirmative consent, when necessary for security or abuse prevention, or when required by law. We may also disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect the rights, property, or safety of deezbills, our users, or others.

If you choose to connect your Gmail account, deezbills requests the gmail.readonly scope through a dedicated Gmail OAuth client that is separate from Google sign-in. Automatic expense detection uses relevant messages to detect financial documents and import transactions. Enabling Gmail for Fred is a separate, affirmative choice: Fred may search and read messages, threads and supported attachments to help with financial tasks and decisions. Fred may inspect source content to establish relevance; unrelated content is ignored, and mixed sources contribute only information relevant to the financial task. Selecting a source does not expand Fred beyond financial work. Gmail access is read-only: deezbills cannot send, edit, archive or delete your email. Raw retrieved Gmail message and attachment content is processed for the current turn and is not saved as a reusable document or used for automatic long-term memory extraction. Relevant information included in Fred responses remains in your saved conversation. Turning off Fred access prevents future retrieval without stopping separately enabled automatic expense detection. deezbills may store derived records and processing metadata such as Gmail message IDs, sender domain or display name, normalized subject, parsed financial fields, billing-document records, expense records, processing status, and audit logs needed to operate the feature. Gmail tokens are encrypted at rest. You can revoke Gmail access at any time through your Google account settings or within the deezbills application.

The use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. deezbills uses Gmail data only to provide or improve user-facing features that are visible and prominent in the app, such as detecting financial emails, extracting billing details, creating records you can review, and answering financial questions with relevant messages and attachments when you enable Gmail for Fred.

deezbills uses third-party artificial intelligence providers to power features such as expense categorization, financial insights, receipt and statement parsing, and Fred conversations. Your financial data may be sent to these providers for processing. We are provider-agnostic and may change AI providers at any time without notice. We do not use your data to train third-party AI models. Provider retention varies by service, model, endpoint, and account settings. Providers may retain data temporarily for security, abuse prevention, or technical operation. Disabling stored responses does not by itself guarantee that no provider retention occurs, and we do not claim universal zero retention. AI-generated content, including responses from Fred, may be inaccurate, incomplete, or outdated and does not constitute financial advice.

You may choose to rate a Fred response and, for negative feedback, tell us what went wrong. When you submit negative feedback, deezbills stores your rating, selected reasons, any written details you provide, a snapshot of the complete visible Fred conversation as it exists when you submit the feedback, and limited technical context such as conversation, turn, and run identifiers. The snapshot may contain personal and financial information that appeared in the conversation. Hidden model reasoning, system or developer instructions, raw tool results, and attachment contents are not included. Negative feedback and the included conversation may be reviewed by authorized support, product, and engineering personnel to investigate errors, assess Fred's quality and safety, respond to support issues, and improve Fred's prompts, tools, integrations, reliability, and user experience. Positive ratings are stored as a product-quality signal. Do not include passwords, complete card numbers, account numbers, or other authentication secrets in feedback details or Fred conversations. We do not sell feedback or use it for advertising, and we do not use feedback or conversation snapshots to train third-party AI models. Feedback records are retained only for as long as reasonably necessary for these purposes, subject to the retention, security, legal, and account-erasure provisions described in this Privacy Policy.

If you join or create a Space within deezbills, certain financial data may be visible to other Space members. Shared data may include budgets, financial accounts (when you enable per-account sharing), income sources, goals, expenses, and categories within a shared Space. You control which accounts are shared. You may leave a Space at any time, which revokes other members’ access to your shared data.

Web subscription payments are processed by Stripe. iOS subscriptions are purchased through Apple’s App Store, with RevenueCat helping us validate purchases and manage subscription access. Payment-card credentials are handled by the payment provider and are never stored on our servers. Stripe supplies the information needed to manage web subscriptions, such as subscription status, billing period, and a truncated card identifier. For iOS subscriptions, Apple and RevenueCat process purchase and transaction records, product and subscription status, and the account identifier needed to connect subscription access to your deezbills account. Each provider handles this information under its own privacy policy.

We implement a variety of security measures to protect your personal information. Sensitive personal data such as email addresses, phone numbers, and authentication secrets are encrypted at rest using AES-256-GCM encryption. All data is transmitted via TLS/SSL. We use additional envelope encryption with cloud key management for highly sensitive data. Despite these measures, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

You may request to access, update, correct, or delete your personal information by contacting us or through your account settings. You can’t download your account data directly. Contact support for a copy or help moving it to another service. You can change your communication preferences, disable SMS, disconnect Gmail, and correct onboarding profile facts. Delete your account in Account settings. This is permanent and can’t be undone. When we confirm your request, you’re signed out and can’t use the account. We’ll remove your personal data within 31 days and email you when it’s finished. You’ll get a request number to keep. Your request confirmation means deletion has started, not that all your data has already been removed. If you own a Space with other members, transfer ownership before requesting deletion. Your personal records and identity are removed. Records shared in Spaces may stay with the other members. Web subscriptions are cancelled as part of deletion, without waiting for the current billing period to end. Refund requests follow our existing policy. Account deletion does not cancel an Apple subscription: manage or cancel it in Apple subscription settings to stop future Apple billing. We disconnect Apple sign-in when we have the permission needed to do so. For older Apple accounts, you can confirm with Apple again in the iOS app or remove deezbills from Sign in with Apple in your Apple account settings. You can still delete your account without confirming Apple sign-in. Limited recovery, payment, legal and security records may remain for the purposes and periods described under Retention. If you are in the EEA, you have additional rights under GDPR including the right to data portability, the right to restrict processing, and the right to lodge a complaint with a supervisory authority. If you are a California resident, you have rights under CCPA including the right to know, the right to delete, and the right to opt out of the sale of personal information. We do not sell your personal information.

deezbills is a federally incorporated Canadian corporation. Your data is stored and processed on infrastructure located in Canada and the United States (including Google Cloud Platform). If you access the service from outside these countries, your information may be transferred to, stored, and processed in Canada or the United States. By using deezbills, you consent to such transfers.

deezbills is not intended for anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under 18. If you are a parent or guardian and become aware that your child has provided us with personal data, please contact us and we will take steps to remove that information.

We retain your personal information only for as long as necessary to provide the service to you and to fulfill the purposes described in this policy. Gmail OAuth tokens are retained only while your Gmail connection remains active and are deleted when you disconnect the connection. Processed Gmail metadata linked to imported expenses is generally retained for up to 90 days. Certain non-imported processing records may be retained for up to 365 days to support retry, deduplication, audit, and abuse-prevention needs. Billing documents, expenses, and other records created inside deezbills from Gmail-derived data may remain in your account until you delete them or request account deletion. Expired, unaccepted onboarding plan candidates and proposal sets are cleaned up under our retention jobs; accepted onboarding artifacts remain only as long as needed to explain and maintain your active plan, goals, and audit history. Disconnecting Gmail revokes future access and deletes the Gmail connection plus associated processing records, but imported records you choose to keep in deezbills may remain until separately deleted. When we confirm your deletion request, you’re signed out and can’t use the account. We remove your personal data within 31 days. We email you when deletion is complete. Within deezbills, an encrypted copy of your contact email and the completion message is kept only to deliver that notification, until delivery succeeds or a hard limit of 38 days after your request; that application record is then removed. Resend may retain transactional emails and delivery logs, including account-deletion confirmation emails, for up to 30 days after sending, with backup copies remaining for up to a further seven days. These provider retention periods are separate from the application notification record and may extend beyond account-deletion processing. Emails already delivered to your own mailbox remain under your control. Company support-mail copies may remain recoverable by Google Workspace administrators for up to 25 days after permanent deletion. Once those copies are unrecoverable to us, Google may take up to a further 180 days to remove them from its systems under its applicable data-processing contract. These provider recovery and systems-removal periods are separate from active account-deletion processing. Encrypted database recovery uses seven days of point-in-time recovery and up to eight days of enhanced backup coverage. We keep a small encrypted record of your deletion request, using coded account identifiers, and the encrypted details needed to finish deletion only while relevant database or provider copies can be recovered. We allow up to nine additional days to check restored copies and prevent deleted data from returning. These records are not guaranteed to expire at an exact second. Before a restored database can be used, we remove the data covered by confirmed deletion requests again. Limited audit and operational logs, which may contain coded account identifiers, are retained for up to 30 days. The separate encrypted deletion record may remain longer to prevent deleted data from returning. It and the encrypted details needed to finish deletion are removed after all relevant database and provider recovery copies and the additional checking period have expired. Existing provider-managed security and operations logs created under the legacy policy may remain for up to 90 days until provider expiry. Twilio message-deletion backups may remain for up to 30 days after provider deletion. Provider, payment, and legal records may remain for their separately disclosed purposes and approved periods. To prevent repeat free trials, we keep a coded record of trial or subscription use under a 24-month retention period, including after account deletion. It does not contain your email in plain text. Deleting your account does not make you eligible for another trial during that period. Any legal exception is limited to the minimum records required by a documented applicable legal obligation or claim-preservation basis, with restricted access and a defined retention period.

deezbills uses essential cookies for authentication and session management, local storage to persist your application preferences and state, and sessions to maintain your authenticated state. Security checks may use strictly necessary cookies or client-side signals to protect public flows from abuse. We may use product analytics and event telemetry to understand how the service is used and improve the product, including analytics providers configured for traffic attribution, signup funnels, checkout funnels, and product activation. We use Google Analytics and Google Ads cookies on public pages and account-creation screens to understand how people find our website and complete signup. We share completed-signup events and campaign attribution with Google Ads to measure which ads lead to signups. We do not send names, email addresses, phone numbers, account identifiers, financial records or Fred conversations to Google for this measurement, and we do not enable enhanced conversions or advertising personalization. Google Analytics and Google Ads are not used on pages containing your private financial information. We use PostHog to measure public-page performance and progress through signup and subscription. When enabled, session replay records only signed-out marketing pages, with forms and inputs blocked; signup and private financial screens are excluded. Replay does not capture console logs or network payloads and has a 30-day retention period. We connect browser activity to an account using a pseudonymous identifier, without sending names, emails or financial content to PostHog. Browser Do Not Track and Global Privacy Control signals disable browser analytics and replay. We do not use social media tracking pixels or use your financial information to personalize advertising. You can disable cookies in your browser settings, but some functionality may become unavailable. See our Cookie Policy for more details.