BILLNEST · Yapay Payments Pty Ltd

Privacy Policy

Last updated: 30 September 2026

BILLNEST is operated by Yapay Payments Pty Ltd (we, us, our). This policy explains how we handle personal information when you use BILLNEST for personal or business bills, receipts and statements. Contact us at billbeedevelopment@gmail.com.

1. Information we collect

• Account information, such as your name, email address, sign-in identifier, business or account name, membership and preferences.
• Documents you upload, forward or authorise us to import, and their extracted information: supplier and recipient details, addresses, invoice numbers, dates, items, taxes, totals and payment details appearing in the document.
• Records you create or change, including suppliers, locations, corrections, document links and payment statuses.
• Connection and import information, technical logs, security events and error diagnostics needed to run and protect the service.

You must have authority to provide documents or information about other people. You can use manual uploads without connecting Gmail.

2. Gmail access and imports

Connecting Gmail is optional and requires your permission through Google. BILLNEST requests read-only Gmail access to identify and import financial documents. We can read message metadata, including sender, subject, dates, message identifiers and attachment details. We inspect snippets and limited message text to identify relevant messages and download supported attachments. Gmail message bodies used for classification are not saved as a mailbox archive.

We save the connected email address, encrypted access credentials, import history, relevant message metadata, imported attachments and extracted records. Automatic checks follow each mailbox’s settings. You can change the schedule, turn automatic checks off or disconnect in Settings. BILLNEST does not send, delete, move or mark Gmail messages as read.

Forwarding is a separate feature: when you send an email to your BILLNEST forwarding address, its original message and attachments may be stored to process the documents and maintain their source history.

3. How we use information

We use information to authenticate you, import and organise documents, extract their fields, suggest supplier and location matches, identify possible duplicates, link statements, show amounts due and record payment statuses. We also use necessary information to provide support, investigate errors or abuse, secure the service and meet legal obligations.

Automated extraction uses Amazon Web Services (AWS) document-recognition and AI services, including Amazon Textract and Amazon Bedrock. Document content is processed to deliver these features. Extraction can be wrong; you can review and correct the results. We do not use Gmail data to train or fine-tune general-purpose AI models.

4. Google data and Limited Use

Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including their Limited Use requirements.

We do not sell Google user data, use it for advertising, or use it to assess creditworthiness or lending eligibility. Access and transfers are limited to delivering the features you authorise, necessary security purposes or legal requirements. Human access to Google data is limited to your explicit permission for specific data, necessary security investigations, legal requirements, or aggregated and anonymised internal operations as permitted by those policies. A transfer of Google data as part of a business sale requires your prior explicit consent.

5. Service providers and sharing

We use AWS for hosting, storage and document processing, Clerk for sign-in and account authentication, Google for Gmail connectivity, and Sentry for error monitoring. Providers receive the information needed for their role; authentication and monitoring do not require routine access to your invoice attachments. Members you authorise within a shared account can access information according to their account permissions.

Our core document storage and extraction infrastructure is in AWS’s Sydney region. Authentication, monitoring and support providers may process information outside Australia, including in the United States. We use access controls and provider arrangements intended to protect information; contact us for questions about overseas processing. We may disclose information when required by law or necessary to protect the service, subject to the Google-data restrictions above.

6. Security and cookies

We use encrypted connections, restricted document storage, account access controls and encrypted stored Gmail credentials. No online service can guarantee absolute security. Keep your sign-in details secure and report suspected unauthorised access promptly. Cookies and similar browser storage support sign-in, session security and app preferences. Blocking them may prevent those features from working.

7. Retention, disconnection and deletion

We retain imported documents and associated records while needed to provide your account. Disconnecting Gmail removes its saved credentials from the active account and stops future imports through that connection. It does not delete previously imported documents. You can also remove BILLNEST’s access in your Google Account connections.

The account owner can request account deletion in Settings. Imports stop and access is restricted during a 30-day recovery period. After that period, cleanup permanently removes the account’s documents and related financial records from the live service. Backup copies expire through backup rotation and may remain temporarily after live deletion. Limited security, support or legally required records may be retained for their necessary purpose. Deleting a BILLNEST account does not delete original emails in Gmail or automatically delete a sign-in identity used for other BILLNEST accounts. Contact us to request deletion of that identity or other personal information.

8. Access, corrections and complaints

You can correct document fields and account details in the app. To request access to, correction of or deletion of other personal information, or to make a privacy complaint, email billbeedevelopment@gmail.com. We may need to verify your identity and authority. We will assess and respond to your request, explain any lawful limits, and work with you to resolve concerns. If you remain dissatisfied, you can contact the Office of the Australian Information Commissioner.

9. Changes to this policy

We will publish updates here with a revised date and notify you of material changes through the app or email. We will obtain additional consent where required before using your information for a new purpose.