Privacy.
Our privacy policy, in plain English.
Last updated: September 25, 2026. This policy covers www.falconbill.com and the Falcon Bill app.
In short
We collect what we need to run the service, your account information, the documents you create, and the payments you process. We don't sell your personal information for money, and we don't share your client list with anyone. We do share limited data with Google to measure our ads and use product analytics, both described below, and you can opt out of ads sharing at any time.
What we collect
Your name and email from sign-up, the workspace name you pick, the clients and jobs you enter, the documents you issue, the photos you upload, and metadata about payments processed through Stripe. We log basic request diagnostics (status codes, timing, IP address) to keep the service healthy and stop abuse. We also record how the site is used (pages viewed, clicks, errors) and, if you arrive from one of our Google ads, the ad-click ID.
How we use it
To run the product, to support you when you email us, to bill you for your plan, to detect abuse, and to see which of our ads bring in customers. We don't enrich your data with third-party databases.
Advertising and analytics
Google Ads conversion tracking runs on our marketing pages, on sign-up and in the app. When you sign up or pay, Google's tag can send Google a hashed copy of your email address (enhanced conversions). When a paid plan starts after a click on one of our ads, our server reports it to Google Ads with the ad-click ID and a hashed email and phone number. The Google tag never loads on the invoice and estimate pages our customers send their clients. Through its tag, Google may collect information about your activity on our site over time and across other websites. Our site doesn't respond to browser Do Not Track signals.
PostHog records product analytics (pages viewed, clicks, errors) across the site, including those client pages. Session replay, a recording of how a page was used with form inputs masked, runs for visitors who arrive from our ads and for sessions that hit an error. In the app, on client pages and in our free generators it also masks all text, so it shows layout and clicks but no names, addresses or amounts. Vercel Analytics counts page views without cookies.
Sub-processors
Clerk (auth), Neon (database), Vercel (hosting, file storage, and cookieless page analytics), Stripe (payments; its script collects device and browser details to prevent fraud on pages where it loads), Resend (transactional email, including the invoices and estimates you send), Customer.io (our lifecycle emails, such as the welcome and trial reminders), OpenAI (processes the messages you send the Bill assistant; OpenAI keeps them for up to 30 days to detect abuse and doesn't train on them), Groq (transcribes voice notes and runs the public voice invoice demo; the audio passes through, we don't store it), PostHog (product analytics, session replay, error diagnostics, and AI-trace telemetry), Google Maps Platform (address autocomplete queries). Each holds a narrow slice of data for a narrow purpose.
Your clients' data
When you add your clients to Falcon Bill or send them invoices and estimates, we process their information on your behalf to provide the service. You're responsible for having the right to share it with us. We don't use it for our own marketing, and we don't sell it. A data processing addendum is available on request.
How long we keep it
Your account and workspace data stay while your account is open, and we erase them within 30 days of an erasure request. Messages in Bill conversations are deleted after 90 days, or sooner when you delete them. Abuse counters keyed on a hashed IP address are deleted after two days.
Emails
We send account, billing and product emails. Some of them, such as the purchase confirmation, include a small image that tells us whether the email was opened.
Your controls
Export your clients and price book to CSV any time. Delete any Bill conversation, or all of them, in-app whenever you like. For full workspace erasure, email us and we'll confirm the erase within 30 days.
Opt out of ads sharing on Your privacy choices; the choice is saved on that browser. We don't act on the Global Privacy Control signal some browsers send, so use that page to opt out. Once you're opted out, the Google tag runs without advertising cookies or ad personalization, we attach no email to conversions, and we don't keep your ad-click ID.
Children
Falcon Bill is a service for businesses. It isn't directed to children under 13, and we don't knowingly collect their personal information.
Changes to this policy
When we change this policy, we post the new version here with a new date. For a material change, we also email workspace owners before it takes effect.
Questions about your data? Email support@falconbill.com or use the contact page; we answer every one.
Export, delete, or move on your terms.
Every workspace includes CSV export and a clean delete path.
How we think about your data.
Collect the minimum
We ask only for what we need to run and improve the service and to measure our ads, and we delete it when we no longer need it.
Never for sale
Your client list, your jobs, your photos, none of it is a product we resell, rent, or trade.
Encrypted in flight and at rest
TLS on every request, disk-level encryption on every database. Backups are encrypted the same way.
Isolated per workspace
Every query that reads business data carries a workspace filter. Tenant leakage would be a bug, not a feature.
Narrow sub-processors
Each vendor gets only the data they need for the job we hired them for. We keep the list short and public.
Deletable on request
Email us and we'll permanently erase your workspace within 30 days. Bill chat threads you can delete yourself, in-app, any time.
Practices we have chosen to skip.
- Sell or trade customer data
- Load the Google tag on the invoice pages your clients open
- Fingerprint devices beyond session identifiers
- Enrich user records with outside data brokers
- Train AI models on your private workspace content
- Share your client list with partners or affiliates
- Email your clients on your behalf without your action
- Keep data longer than we need for service or law
Clear data practices, simple plan.
No sale of data, a one-click ads opt-out, no surprises.
Privacy questions.
Do you train AI on my workspace data?+
No. We don't use your private workspace content to train models, and we don't pass it to third-party AI providers for training.
Can I request a copy or deletion of my data?+
Yes. Export your clients and price book to CSV yourself any time from the Clients and Price book pages, or email us at support@falconbill.com to request a full export or permanent deletion. We confirm within 30 days.
Where is the data stored?+
Primary storage is Neon (US regions) for the database and Vercel Blob for files. Stripe holds payment and card data directly. Beyond storage, data only flows to the sub-processors listed above, each for the single job we named, and to Google Ads for the conversion measurement described above.
Do you comply with GDPR and CCPA?+
We honor requests to access, delete or export your data. We don't sell data, and you can opt out of sharing for advertising on Your privacy choices. Email us to exercise any other right.
What about cookies?+
Session cookies from Clerk for auth and a first-party analytics cookie from PostHog. On marketing pages, sign-up and the app, the Google tag can set Google Ads cookies unless you opt out; it never loads on client invoice pages. Our own first-party cookies keep your workspace selected, carry a checkout or generator purchase between pages, hold voice-demo and A/B-test sessions, keep a Google ad-click ID for up to 90 days (fb_gclid), and remember an ads opt-out for a year (fb_ads_optout). Stripe sets fraud-prevention cookies on pages where you pay.
I paid an invoice through Falcon Bill. What did you collect?+
The business that sent the invoice decides what's on it; we host the page and Stripe processes your card. The page records basic analytics in PostHog (pages viewed, clicks, errors); if a session replay runs there, it masks all text and form inputs. The page doesn't load the Google tag.
Try Falcon Bill free. Your first three jobs are on the house, no card required.
Start free