Privacy Policy

Last updated: June 2026

1. Who We Are

ForeBill is a SaaS subscription and spend tracking platform operated by ForeBill, based in Ireland. We are subject to GDPR as we are established in the European Union.

Contact: support@forebill.com
Website: forebill.com

2. What Data We Collect

When you sign up:

• Your name and email address via Google OAuth
• Your Google account profile picture

When you use ForeBill:

• Subscription data you add manually or import
• Billing email metadata (sender, subject, amount) from Gmail — read-only access, billing emails only
• Cloud cost data from connected AWS, Azure, or GCP accounts
• AI API usage data you log manually or connect
• Your budget settings and notification preferences
• Usage logs (which features you use, when you log in)

What we do NOT collect:

• Personal email content
• Passwords (handled by Google)
• Payment card details (handled by Stripe)
• Any data from emails that are not billing-related

3. Why We Collect It

We collect this data solely to provide the ForeBill service:

• To show your subscription dashboard
• To send renewal alert emails
• To generate spend reports and projections
• To detect subscriptions from your Gmail (only if you connect it)
• To improve the product based on usage patterns

We do not use your data for advertising. We do not sell your data to any third party. Ever.

4. How We Store Your Data

All data is stored on Amazon Web Services (AWS) DynamoDB, eu-west-1 region (Ireland). Data is encrypted at rest using AWS managed encryption keys. Data is encrypted in transit using HTTPS/TLS.

Your data never leaves the EU.

5. Third Parties Who Process Your Data

Amazon Web Services — Cloud hosting and database. Location: eu-west-1 (Ireland).

Google LLC — Authentication (OAuth) and Gmail read access (if connected). Location: USA (Standard Contractual Clauses).

Anthropic PBC — AI classification of billing emails to detect subscriptions. We share email subject lines and sender information only — never full email body content. Location: USA (Standard Contractual Clauses).

Stripe Inc — Payment processing (when billing is active). We never see your card details. Location: USA (Standard Contractual Clauses).

We do not share your data with any other third parties.

6. Your Rights Under GDPR

• Right of Access: Request a copy of all data we hold about you.
• Right to Portability: Export all your data in CSV/JSON from Settings.
• Right to Erasure: Delete your account and all data from Settings → Delete Account. Data removed within 30 days.
• Right to Rectification: Correct any inaccurate data via your Settings panel.
• Right to Object: Object to any processing by contacting us directly.
• Right to Withdraw Consent: Disconnect Gmail access at any time from Settings → Integrations.

To exercise any right, email us at support@forebill.com. We respond within 48 hours and resolve within 30 days.

7. Gmail Access

ForeBill requests read-only Gmail access limited to billing-related emails using the scope: gmail.readonly. We specifically:

• Only process emails matching billing keywords
• Never read personal emails
• Never store full email content
• Never share email data with anyone except Anthropic for AI classification

You can revoke Gmail access at any time from ForeBill Settings → Integrations or from myaccount.google.com/permissions.

8. Cookies

ForeBill uses one cookie only: a session cookie to keep you logged in. Type: HttpOnly, Secure, SameSite. Duration: 30 days. Purpose: Authentication only.

We do not use advertising cookies, tracking cookies, or analytics cookies.

9. Data Retention

• Active accounts: data kept while your account is active.
• Trial accounts that do not convert: data kept for 90 days after trial ends, then automatically deleted.
• Cancelled accounts: data deleted within 30 days of cancellation request.
• Audit logs: retained for 12 months for security purposes, then deleted.

10. Children

ForeBill is not intended for anyone under 18 years of age. We do not knowingly collect data from minors.

11. Changes to This Policy

We will notify you by email at least 30 days before any material changes to this privacy policy.

12. Contact and Complaints

For any privacy questions: Email support@forebill.com. Response time: within 48 hours.

If you are unhappy with our response you have the right to lodge a complaint with the Irish Data Protection Commission: dataprotection.ie / +353 57 868 4800.