Legal
Last Updated: July 29, 2026
BillAxe ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use BillAxe at billaxe.app.
By using BillAxe you agree to the collection and use of information described in this policy.
When you create an account we collect your email address, password (stored as a secure hash — never plaintext), and optionally your phone number for SMS notifications.
BillAxe uses Plaid Technologies Inc. to connect to your bank accounts. When you link a bank account we receive:
We do NOT receive or store your bank login credentials, Social Security number, or full account numbers. Plaid handles all bank authentication directly.
If you choose to connect your email account (Microsoft Outlook via OAuth or any IMAP-compatible email provider), BillAxe scans your inbox for bill-related emails to detect subscriptions and recurring charges. Email credentials are encrypted at rest using AES-256-GCM. We only read emails — we never send emails on your behalf or store full email content beyond what is needed to identify bills.
If you connect your TikTok or YouTube account, BillAxe stores your OAuth access token and refresh token encrypted in our database. These tokens are used solely to post content you explicitly approve. You can disconnect your social accounts at any time from the Settings page.
We analyze your transaction and email data to detect recurring subscriptions, identify potential tax deductions, and surface savings opportunities. This analysis is performed automatically using AI.
Payments are processed by Stripe. We do not store your credit card number, CVV, or full payment details. Stripe handles all payment data under their own PCI-DSS compliance.
We collect standard usage data including IP address, browser type, pages visited, and time spent on pages to improve the service. We also collect UTM parameters to understand how users discover BillAxe.
We use your information to:
We do NOT sell your personal information or financial data to third parties. Ever.
All Plaid access tokens, email credentials, and social media OAuth tokens are encrypted at rest using AES-256-GCM encryption before being stored in our database. All data is transmitted over TLS 1.2 or higher at all times.
Our database uses Row Level Security (RLS) — meaning each user can only ever access their own data. No BillAxe user can see another user's data.
Access to production data is restricted to authorized personnel only. All API endpoints require authentication tokens.
We share your data only with the following trusted service providers who are bound by their own privacy policies:
We do not share your data with advertisers, data brokers, or any other third parties.
If you provide your phone number and opt in to SMS notifications, BillAxe will send you transactional messages including bill negotiation results, savings confirmations, subscription cancellation updates, and content approval requests.
We retain your data for as long as your account is active. If you delete your account we will delete all your personal data and financial data within 30 days. Transaction data retrieved via Plaid is retained only as long as needed to provide the service. Email credentials and social media tokens are deleted immediately upon disconnection.
You can view all data BillAxe holds about you by logging into your dashboard.
You can request full deletion of your account and all associated data at any time by visiting billaxe.app/delete-my-data or emailing privacy@billaxe.app.
If you are a California resident you have the right to:
To exercise your CCPA rights visit billaxe.app/do-not-sell or email privacy@billaxe.app.
If you are in the European Economic Area you have the right to access, correct, delete, and port your data. Contact us at privacy@billaxe.app.
We use essential cookies to keep you logged in and maintain your session. We use analytics cookies to understand how users interact with the site. You can manage cookie preferences via the cookie consent banner when you first visit the site.
BillAxe is not intended for users under the age of 18. We do not knowingly collect data from minors.
We may update this Privacy Policy from time to time. We will notify you of significant changes via email. Continued use of BillAxe after changes constitutes acceptance of the updated policy.
For privacy-related questions or requests contact us at:
Email: privacy@billaxe.app
Website: billaxe.app