Privacy Policy

1. Overview

This policy explains how Oyku Pty Ltd (trading as UpBill) (“UpBill”, “we”, “us”) handles personal information, consistent with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

In short: we collect what we need to run an invoicing service for you, we don't sell your data, and your card details never touch our servers.

2. What we collect

• Account details — your name, email address and password (stored as a secure hash).
• Business details — your business name, ABN, address, logo and payment/bank details you choose to show on invoices.
• Customer and invoice data — the customers, invoices, line items and payment records you create in UpBill.
• Subscription billing data — your subscription status and history. Your card details are collected and stored by Stripe, not by us.
• Technical data — basic logs (such as IP address and browser type) needed to keep the service secure and reliable.

3. How we use it

• To provide the service — creating, sending and tracking your invoices, and showing your dashboard.
• To bill your subscription and send service emails (invoice sending, payment receipts, billing reminders, failed-payment notices).
• To keep UpBill secure, prevent fraud and misuse, and improve the product.
• To meet legal obligations, such as tax and financial record-keeping.

We do not sell personal information, and we don't use your invoice data for advertising.

4. Who we share it with

We use a small set of service providers to run UpBill, each receiving only what they need:

• Stripe — payment processing, for your subscription and (if you connect Stripe) the invoice payments you receive from your customers.
• Supabase — our database and authentication provider, where your account and invoice data is stored.
• Resend — sending transactional email (invoice emails, receipts, billing notices).
• Vercel — hosting the UpBill application.

Some of these providers process data outside Australia (typically in the United States). We choose established providers with strong security practices and contractual privacy commitments.

We may also disclose information where the law requires it (for example, to the ATO or under a court order).

5. The customer data you store in UpBill

The details of your customers (names, emails, addresses, ABNs) belong to you. We process them only to provide the service to you — for example, emailing an invoice to your customer at your request. You are responsible for having the right to use your customers' details this way.

6. Cookies

UpBill uses essential cookies only — the ones needed to keep you signed in securely. We don't use advertising or cross-site tracking cookies.

7. Security

All traffic is encrypted in transit (HTTPS). Data is stored with per-organisation isolation enforced at the database level, so one business can never see another's data. Card details are handled entirely by Stripe, which is PCI-DSS certified.

No system is perfectly secure. If a data breach occurs that is likely to result in serious harm, we will notify you and the OAIC as required by the Notifiable Data Breaches scheme.

8. Retention

While your account exists, we keep your data so the service works — including in read-only mode after a subscription ends, so your financial records stay available to you.

If you ask us to delete your account, we will delete or de-identify your personal information, except where we are legally required to retain records (for example, financial records that must be kept for a number of years under Australian law).

9. Your rights

You can access and correct most of your information directly in the app (Settings). You can also contact us to request access to, correction of, or deletion of your personal information.

If you have a privacy concern, email support@upbill.io and we'll respond promptly. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

10. Changes and contact

If we make material changes to this policy, we'll notify you by email or in the app before they take effect.

Privacy questions: support@upbill.io.