Privacy Policy
Effective date: 4 September 2026
This policy explains how VendorBill handles information when users use VendorBill services and optional integrations.
Business information
VendorBill may process company, client, service-site, invoice and contact information entered by users to provide billing and related business functions.
Google account integration
When a user chooses to connect a Google account, VendorBill uses Google's OAuth authorization process and does not request the user's Gmail password.
For the current sending-only Gmail integration, VendorBill requests permission to send email on the user's behalf using the Gmail API. This permission is used when the user instructs VendorBill to send emails or invoices. VendorBill does not request permission to read the user's Gmail inbox as part of this sending-only integration.
Use and sharing of Google user data
Google user data obtained through Google APIs is used only to provide or improve user-facing features the user has authorized. VendorBill does not sell Google user data and does not use it for advertising.
VendorBill does not transfer Google user data to third parties except where necessary to provide the requested service, comply with applicable law, protect security, or where the user has provided appropriate consent.
Security
VendorBill aims to use reasonable technical and organisational safeguards for authorization tokens and business data and to limit access to functions required to provide the service.
Revoking Google access
Users can revoke VendorBill's access through their Google Account connected-app/security settings. After revocation, VendorBill can no longer use that authorization to send Gmail messages.
Retention and deletion
VendorBill retains information only as reasonably required to provide the service and meet legitimate business or legal requirements. Users may contact VendorBill regarding deletion, subject to applicable record-retention requirements.