bilzie1. Who we are
Bilzie (bilzie.com) is operated by SIA EMPLV, a company based in Rīga, Latvia, registration number 40203510915 ("we", "us"). We are the data controller for the personal data described in this policy, except where section 4 says otherwise.
For anything about privacy, write to [email protected]. A person reads that mailbox.
2. The short version
We use what you enter to run Bilzie for you and the people you share a workspace with. We do not sell it, show you ads, or use it to build a profile of you.
- You sign in with Google or GitHub. We never see or store a password.
- Workspace content is visible to the members of that workspace and to no other Bilzie user.
- Google Drive is optional. If you connect it, Bilzie can only see folders you choose or folders Bilzie created, and it never reads your files.
- Website analytics count page views with cookies and are never linked to your account.
- You can delete your account yourself at any time.
- The service and its database are hosted in the European Union.
3. When you sign in
Bilzie has no passwords. You sign in through Google or GitHub, and the provider tells us who you are:
- Google (scopes openid email profile): your name, email address, whether Google has verified it, your profile picture URL, and your Google account ID.
- GitHub (scopes read:user user:email): your name or username, your primary email address and whether GitHub has verified it, your avatar URL, and your GitHub user ID.
The provider also gives us an access token, which is stored encrypted with your account. We do not use it to read anything from your Google or GitHub account. Its only use is to withdraw Bilzie's access when you delete your account. If you sign in with both providers using the same verified email address, both sign-ins lead to the same Bilzie account.
You can also withdraw Bilzie's access yourself at any time, for Google at myaccount.google.com/permissions and for GitHub at github.com/settings/applications. You will then need to grant it again the next time you sign in.
Each time you sign in, we record a session: its expiry time, your IP address, and your browser's user-agent string. We use them to keep you signed in and to protect accounts from misuse. To limit abuse of sign-in and account requests, we also count them per IP address in one-minute windows.
You can change your display name and profile picture in Bilzie. Your email address comes from your sign-in provider.
4. What you keep in Bilzie
Inside a workspace, Bilzie stores what you and the other members enter:
- The workspace's name, type (personal or company), currency, timezone, and budget.
- Expenses and subscriptions: names, vendors, categories, amounts, billing dates, payment method labels, notes, invoice links, where an invoice is saved, and your instructions.
- For each billing cycle, whether it was paid and whether its invoice was saved, with who ticked it and when.
- Credits and loans: names, counterparties, amounts, dates, agreement links, notes, and repayments.
- Members and their roles, and invitations: the invited email address, role, and inviter.
- An internal record of which member created or changed an item and when. It is used for integrity and support and is not shown in the app.
Notes and counterparties can contain information about other people, such as the person you lent money to. Please enter only what you need. Do not store full card numbers, bank credentials, or passwords in Bilzie. The payment method field is meant for a label such as "Company card • 4242".
Personal and business use
If you use Bilzie for yourself, your household finances are yours to manage. If a business uses Bilzie, the business decides what its workspace records, and we process that content on its behalf to provide the service. Businesses that need a data processing agreement can ask us at [email protected].
The public demo
The sample-data demo runs entirely in your browser. Nothing you enter there is sent to us, and it resets when you reload the page.
5. Google Drive folders
A workspace owner or admin can connect Google Drive so that Bilzie creates a folder for each billing month inside a parent folder they choose. Connecting is optional, separate from signing in, and may use a different Google account.
- Bilzie asks only for the drive.file permission. With it, Bilzie can see only the folder you pick in Google's folder picker and the folders Bilzie creates. It cannot see the rest of your Drive.
- Bilzie reads folder details (name, type, location, and whether it can add folders there). It creates monthly folders named like 2026-10 and labels them in Drive with the workspace's ID and month so it can find them again.
- Bilzie never reads, downloads, uploads, or deletes your files, and never changes who a folder is shared with.
- The long-lived Google credential is stored encrypted (AES-256-GCM) on our server. A short-lived access token is passed to your browser only while the folder picker is open.
- Disconnecting deletes the stored credentials and withdraws Bilzie's access at Google, unless the person who connected Drive still uses it in another Bilzie workspace, which relies on the same Google authorization. The folders, and the files you put in them, stay in your Drive. You can also remove Bilzie at any time at myaccount.google.com/permissions.
Bilzie's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In practice, this means we use Google user data only to provide sign-in and the Drive folder feature you see in Bilzie. We do not sell it, use it for advertising, or use it to train AI or machine-learning models. People do not read it, except with your permission, when needed for security, or when the law requires it.
6. Emails
Bilzie currently sends one kind of email: a workspace invitation, sent when an owner or admin invites someone. It contains the recipient's email address, the inviter's name, the workspace name, and a link to accept. If you were invited, we received your email address from the person who invited you. The invitation expires after seven days.
We do not send newsletters or marketing email. Bilzie does not email reminders or financial information automatically.
7. Website analytics
We use DataFast to count page views on bilzie.com, so we know which pages people use. Bilzie never tells it who you are.
- For each page view, DataFast receives the full address of the page, including any parameters in it, such as an invitation or workspace ID. It also receives the referring site, your screen and window size, language, timezone, and browser user-agent string, and your IP address as part of the connection.
- DataFast's script sets cookies in your browser to recognise a returning visitor and to group page views into visits. They are listed in section 8.
- We send no names, email addresses, workspace content, or account IDs, and we do not track clicks or other events.
- Blocking requests to datafa.st opts you out and does not affect anything else.
9. Service providers
These companies process personal data for us, each only for the purpose shown:
| Service | What it handles | Why |
|---|---|---|
| OVHcloud | The server that runs Bilzie, its database, and its backups, in a data centre in Warsaw, Poland. | Hosting. |
| Cloudflare | All traffic to bilzie.com, including your IP address and requests. | Encrypted connections, delivery, and protection against attacks. |
| Sign-in, if you choose Google. Drive and the folder picker, if connected. | Sign-in and the optional Drive folders. | |
| GitHub | Sign-in, if you choose GitHub. | Sign-in. |
| Resend | Invitation emails: recipient address, inviter name, workspace name, link. | Email delivery, from its EU sending region. |
| DataFast | Page views as described in section 7. | Website analytics. |
When you sign in with Google or GitHub, or use Google Drive, those companies also handle your data as controllers under their own privacy policies. Some of these providers are based outside the European Economic Area, mainly in the United States. Where personal data is transferred there, the transfer relies on the EU–US Data Privacy Framework or on the European Commission's Standard Contractual Clauses.
10. Who can see your data
- Members of your workspaces see that workspace's content, and each member's name, email address, profile picture, and role.
- Bilzie's system administrators (SIA EMPLV staff) can see the list of accounts: names, email addresses, profile pictures, and sign-up dates. They can block an account or sign it out. They cannot open workspace content through the app.
- The people who run our server have technical access to the database and backups. They use it only to operate and secure Bilzie, to help when you ask for support, or when the law requires it.
We disclose data to authorities only when a valid legal request obliges us to.
11. Legal bases
Under the GDPR we rely on these legal bases:
- Performance of a contract (Article 6(1)(b)): your account, sign-in, storing workspace content, sending invitations you request, and the Drive folders you connect.
- Legitimate interests (Article 6(1)(f)): keeping Bilzie secure (session IP addresses, rate limiting, change records, and backups) and understanding which pages are used through website analytics. For invitations, it is the shared interest of the inviter and the invitee in delivering an invitation the inviter asked us to send. You can object to processing based on legitimate interests at any time.
- Legal obligation (Article 6(1)(c)): when the law requires us to keep or disclose information.
12. How long we keep data
- Account and profile: until you delete your account.
- Workspace content, its change records, and expired invitations: as long as the workspace exists. Archived items are kept so past months stay accurate.
- Sessions: a session expires 14 days after it was last used, and signing out deletes it immediately. Session records are deleted with your account.
- Rate-limit counters: one-minute windows. Old counters are cleared automatically as later requests arrive.
- Google Drive credentials: until the workspace disconnects Drive. Temporary records from the connection flow are kept for 10 to 30 minutes.
- Backups: daily database backups are kept for 30 days, plus a backup taken before each of the last 10 software updates. Deleted data disappears from backups as they are replaced.
- Analytics and email delivery records: kept by DataFast and Resend under their own retention schedules. Neither is linked to your Bilzie account.
13. Security
- Every connection is encrypted, from your browser to Cloudflare and on to our server.
- The database is not reachable from the internet.
- Every request for workspace data is checked against your membership of that workspace.
- Sign-in cookies are inaccessible to scripts and sent only over HTTPS.
- Sign-in tokens and Google Drive credentials are encrypted at rest.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the supervisory authority as the GDPR requires.
14. Your rights
Under the GDPR you have these rights over your personal data:
- to access it;
- to correct it;
- to have it erased;
- to restrict or object to its processing;
- to receive it in a portable format.
How to use them in Bilzie:
- Correct: change your name and picture in your profile, and workspace content in the app.
- Export: download workspace expenses and loans as CSV from Reports. For a copy of your account data, write to us.
- Delete: choose Delete account on your profile page. It needs a sign-in from the last day. Deleting your account:
- removes your account, sign-in connections, and sessions;
- deletes every workspace where you are the only member, with everything in it;
- ends your membership of shared workspaces, where what you added stays with the workspace;
- disconnects the Google Drive connections you set up;
- withdraws Bilzie's access at Google and GitHub.
We answer requests within one month. You also have the right to complain to a supervisory authority. In Latvia, that is the Data State Inspectorate (Datu valsts inspekcija). You can also complain to the authority in the EU country where you live.
15. Children
Bilzie is not meant for children, and you must be at least 16 to use it. We do not knowingly collect personal data from children. If you believe a child has created an account, write to us and we will delete it.
16. Changes to this policy
When Bilzie's handling of data changes, we update this page and its "Last updated" date. Before a material change takes effect, we tell signed-in users in the app or by email. That includes a new service provider, a new kind of data, or a new use of existing data.
17. Contact
SIA EMPLV, registration number 40203510915, VAT LV40203510915,Rīga, Latvia. Email: [email protected].
See also the Terms of Service.