Here's an honest account of where your data lives, who can see it, and how we protect it.
Your account and invoice data are stored on Billino's servers in Nuremberg and Frankfurt, Germany — inside the EU — and made available to you in the app and in any browser after you sign in. The app keeps a local copy on your device so you can keep working with a poor connection.
Because your data lives in your account, reinstalling the app or switching devices doesn't lose anything — sign in and it's there.
All traffic between your device and our servers is encrypted in transit (TLS). Access to your data requires your account credentials, and each account's data is isolated — no other user can see your invoices, recipients, or profile.
You can export your full dataset at any time, on any plan — your data is never locked in. To delete your account and all associated data, use the account settings or contact us.
The marketing site at billino.io is a static site served over TLS via Cloudflare's global edge network. The web app requires authentication; the marketing pages involve no login and set no cookies.
Found a security issue? Please email support@billino.io. We aim to acknowledge reports within 48 hours and will credit researchers who report responsibly.
We do not have a bug bounty programme at this time.