BillNest — 2026-10-12 Terms of use BillNest provides tools for records you manage on your own device and in storage you choose. Please read these terms before opening your workspace or using BillNest Scan. You control your records, access permissions and backups. Review documents before relying on them. The service has limitations, including the liability limits in section 8; your mandatory legal rights remain protected. 1. Your agreement with BillNest These terms are between you and the operator of BillNest at billnest.org (BillNest, we, or us), reachable through Contact us. They cover the BillNest web workspace and BillNest Scan. They do not govern a separate travel-tracking app. You must have legal capacity to enter this agreement and authority to act for any business on whose behalf you use the tools. You accept by checking the agreement box and selecting Agree and continue. Merely visiting a public page, viewing the demo, or downloading your existing records for recovery does not constitute acceptance. Both French and English versions are available before agreement. You can read the full terms, keep a copy, or leave without agreeing. Acceptance is recorded separately for each profile and for the scanner. The profile receipt identifies the username, profile identity, agreed policy version, date, language and affirmative statement. It is saved inside the encrypted profile and travels with subsequent backups and optional cloud sync; a browser copy may also remain. The scanner receipt stays in its browser. Receipts are not sent to BillNest. Routine refreshes do not require agreement again. A materially changed agreement, a new profile, or missing acceptance records requires agreement again. Restoring or syncing the same profile with its valid receipt preserves the original acceptance. This receipt is not an identity verification service or a centrally verified audit record. 2. What the tools provide BillNest currently offers its web tools without a subscription. The tools help you prepare and organize invoices, quotes, orders, expenses, contacts, scans and backups. They do not provide accounting, tax, legal, payroll or other professional advice, and do not certify that your business complies with any recordkeeping standard. You are responsible for checking imported fields, OCR suggestions, tax rates and eligibility, amounts, discounts, numbering, recipient details and documents before approving, sending, paying or reporting them. BillNest does not file returns, make payments or guarantee collection of invoices. Email drafts use your email app; delivery is not verified by BillNest. Your device, internet connection and storage provider may have their own costs. No paid subscription will be started merely by accepting these terms. A future paid service would require a separate, clear offer and agreement. 3. Your records, permissions and storage You retain your rights in the records you enter or import. BillNest receives no ownership of those records. You authorize only the processing and transfers needed for the functions you choose, as described in the privacy policy. You must have a lawful basis and any required permissions for personal information belonging to customers, contractors, employees or other people. The current workspace stores your business profile in this browser. Optional direct cloud sync sends encrypted snapshots directly to your own connected Google Drive. Folder exports go to the location you select. BillNest does not provide hosted business-record storage for the current workspace and does not routinely receive its business-record contents. This does not mean that no information is handled by the operator: support messages, hosting connection logs and possible records from an earlier online version are explained in the privacy policy. You manage access to your device, cloud account, folders and recipients. Readable PDFs, CSVs, ZIP exports and pending scanner files are not protected by your main profile password. Protect those copies separately. Optional cloud connections are your choice, not a requirement for local use. 4. Passwords, backups and synchronization Keep a strong, unique profile password and a recovery backup outside this browser. BillNest cannot reset the profile password online or decrypt an encrypted backup without it. Clearing site data, losing a device or uninstalling a browser may remove local records. Check that your backup can be restored and retain records for the periods your business is required to keep them. Save open forms before syncing. Check for a successful sync before switching devices and sync on the receiving device. Offline changes remain local until synchronization succeeds. Review conflicts before selecting a version; a successful upload does not by itself confirm that another device has received it. A folder backup or downloaded PDF is not a live two-way sync connection. Automatic backups depend on an open, working app and the required permissions. Keep independent recovery copies and do not delete required sync history. Deleting an exported document does not delete its underlying record or older backup copies. 5. Authorized and lawful use Use only profiles, cloud accounts, files and personal information you are authorized to access. Do not upload unlawful material, distribute malware, misrepresent another person, compromise security, interfere with the website or attempt unauthorized access. Do not rely on BillNest for emergency or safety-critical decisions. You may use the tools for your lawful personal or business recordkeeping. BillNest branding and software remain subject to their owners’ rights and applicable third-party licences. These terms grant no ownership of the software or permission to impersonate BillNest. 6. Connected services and privacy Cloud storage, provider sign-in, hosting, your device and your email app depend on their respective providers. Their applicable terms, storage limits, account restrictions and availability apply. BillNest is not affiliated with or endorsed by Google. Other providers’ synced folders are separate from the direct Google Drive sync feature. Read the privacy policy for the information processed, purposes, protection limits, retention and contact process. Accepting these terms does not authorize marketing, sale of personal information or unrelated data use. A new optional connection or new purpose requiring consent will be presented separately. You are responsible for your provider account and sharing choices. BillNest remains responsible for obligations imposed on it by applicable law; describing a third-party dependency does not transfer away those obligations. 7. Availability and warranties We do not promise uninterrupted availability, error-free software or OCR, permanent access to any feature, compatibility with every device, or protection against every security incident or data loss. To the extent permitted by applicable law, the tools are provided as available and without additional warranties of fitness for a particular purpose or guaranteed results. Statutory warranties and rights that cannot lawfully be excluded remain in force. We may update or suspend website features for maintenance, security or abuse prevention. Where reasonably practicable, significant service changes will be announced. Keep independent copies because access or technical assistance cannot be guaranteed. Support aims to provide an initial response within 24–48 hours; it is not an emergency service or a guaranteed response time. 8. Limits of liability — please read To the extent permitted by applicable law, BillNest’s operator is not liable for indirect, incidental, special or consequential losses arising from use of, or inability to use, the tools, including lost profits, lost business opportunities or business interruption. This exclusion applies only where it is lawful and enforceable in your circumstances. We do not assume responsibility for the accuracy or legality of records you supply, your business decisions, your failure to keep recoverable copies, your voluntary sharing, or provider failures outside our reasonable control, except to the extent that applicable law makes us responsible or our own breach or fault caused the loss. This is not a blanket release of BillNest from all responsibility. Nothing in these terms excludes or limits liability for fraud, intentional misconduct, gross negligence or gross fault, bodily or moral injury, or any liability or remedy that applicable law does not permit us to exclude or limit. Your mandatory consumer, privacy and other statutory rights remain unaffected. These terms do not require you to indemnify BillNest for its own wrongdoing. 9. Changes, stopping use and recovery The displayed version identifies these terms. Material revisions require a new affirmative agreement before continued use of the workspace or scanner tools. Updated terms do not retroactively waive claims arising before acceptance. Policy copies are available to save; keep the version you accept. You may stop using BillNest at any time. If you decline an update, the agreement screen provides recovery downloads for the unlocked local profile or locally available scanner files without requiring acceptance. Records and files already stored on your device or in your drive remain yours. Copies in other browsers, provider trash, exports and backups must be managed separately. After use ends, provisions concerning existing responsibilities, records, liability and disputes continue only as appropriate for matters arising during use. We do not claim a right to delete your local or cloud business records merely because you decline these terms. 10. Questions, disputes and applicable rights Please use Contact us for questions, a privacy request, a security concern or a dispute. Do not include passwords or unnecessary private documents. Contacting us is not a prerequisite to exercising a legal remedy and does not extend a filing deadline. These terms do not require private arbitration, waive class proceedings, select an exclusive foreign court or remove rights available under the law that applies to you. If a provision is unenforceable, the remaining provisions continue to the extent permitted by law. Neither language version is intended to reduce rights protected by applicable language laws. Privacy policy Your records, your choices. Here is how BillNest handles information on your device, in backups, and when you connect your cloud drive. Your business profile is encrypted on your device. Optional direct cloud sync sends encrypted copies to your own Google Drive. Exported documents and pending scanner files have different protections, explained below. 1. What this policy covers This policy covers BillNest at billnest.org, including invoices, expenses, contacts, backups, direct cloud sync, and BillNest Scan. BillNest’s operator is responsible for the personal information it controls and can be reached through Contact us below for privacy or security concerns. You can use a local profile without connecting a cloud account. 2. Information you choose to use BillNest processes the information you enter or import: business details, invoices and payments, quotes, orders, expenses, receipts, logos, saved items, and contact information. If you use those sections, this can also include contractor or employee details. Enter only information you are authorized to hold. The app also uses your profile username, device label, settings, file and folder identifiers, timestamps, and sync history to operate. Connecting Google Drive allows BillNest to read the connected account’s email and account identifier to identify the destination and avoid syncing to the wrong account. 3. Your device and password Your main business profile and encrypted recovery backups use password-derived AES-GCM encryption. The BillNest password is used on your device; it is not sent to Google or the BillNest web server. Records are available in memory while your profile is unlocked. The main workspace does not upload your complete business profile to the BillNest web server. Optional Telegram delivery uses temporary server metadata and file transfer as explained below. Browser storage holds the encrypted profile and sync checkpoints, as well as operational information such as language, profile names, folder connections, and app cache. This operational information is not all encrypted. An agreement receipt records the username and profile identity, agreed policy version, acceptance time, language and affirmative statement. It is saved inside the encrypted profile and included in subsequent backups and optional cloud sync to your own drive. A separate unencrypted browser receipt may also be retained for this profile; the scanner receipt is browser-only. Receipts are not sent to BillNest and do not form an owner-accessible register. You may download your receipt and the archived policies you accepted. Clearing site data removes local copies. BillNest has no online password reset for encrypted profiles. 4. Optional Google Drive connection Direct Cloud sync and scanner delivery currently connect to Google Drive. BillNest requests the drive.file permission to create, find, read, and update files and folders created with the app or explicitly opened with it. It does not request general access to every file in your drive. This access is used to send and retrieve your chosen records, restore profiles, check sync history, and deliver or retrieve scans. Direct sync uploads encrypted snapshots from your browser to your own Google Drive. Business records and included receipt or logo attachments are inside the encrypted snapshot. Profile names, file and folder names, timestamps, device labels, identifiers, and sync lineage metadata remain visible to the provider. Google access tokens are held in memory during the connection, not saved to browser storage or BillNest servers. Google processes its sign-in and permission flow under its own privacy policy. Your Google password belongs in Google’s sign-in screen. Disconnecting stops the current connection; it does not delete files already saved. Revoke ongoing authorization through your Google Account’s third-party connections controls. 5. Exports and scanner files An encrypted BillNest backup protects the full profile with its password. Folder backups and ZIP exports also contain readable PDFs, receipts, CSVs, and record files. These exported files are not protected by your BillNest password. Keep their folders private and manage sharing in your device or cloud provider. A folder synced by another drive app is separate from BillNest’s direct two-way sync. BillNest Scan stores pending documents, drafts, inbox settings, and delivery history in its own browser storage. Pending scanner files are not encrypted with your main profile password. Sending a scan uploads a readable document directly to your own Google Drive. Text recognition and review run locally; financial records are created only after your approval. See the scanner privacy notice for more detail. 6. Sharing and service providers BillNest uses Google user data only to provide the sync, backup, restoration, and scanning features you choose. It does not sell Google user data, use it for advertising, or use it to train general-purpose AI models. BillNest’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. You control sharing through your exports, cloud folders, and email app. Invoice email drafts open in your email app; BillNest does not send or track those messages on its server. Selecting Download PDF for an approved invoice marks it as Sent for your own tracking after the browser starts the download. This is not confirmation of email delivery or a completed file save. The download timestamp and any earlier sending history remain in your encrypted profile and its backups. If you contact support, the support mailbox and its email provider receive what you send. Do not send passwords or unnecessary private records. The website host and connected providers may process ordinary connection information, such as IP addresses, browser information, request paths, and operational logs, to deliver and protect their services. BillNest currently does not include advertising trackers or a third-party usage analytics integration. Provider services have their own privacy and retention practices. Depending on their infrastructure, providers may process information outside your province or country, where different laws may apply. A local profile alone does not require an optional cloud connection. Earlier online records An earlier online version used a server database. A read-only recovery endpoint remains for the authenticated owner of those earlier records; this review has not established whether that database still contains records. Current workspace uploads to the old record endpoints are disabled. If you used the earlier version, contact us about access, export or deletion; clearing browser storage or deleting a cloud file does not remove a separate legacy server copy. We will handle any retained legacy information under applicable privacy obligations. 7. Keeping and deleting information Local records remain until you remove them or clear the site’s browser storage. Files and backups saved outside the browser remain in their saved locations. Deleting an invoice PDF does not delete its invoice record, and deleting a record does not remove that record from older backups. Direct sync retains encrypted versions and their history in your drive; it does not automatically prune them. Do not delete individual history files during normal use, because missing history can prevent sync. If you want to remove the cloud workspace entirely, disconnect the affected devices first, then delete its files and use your provider’s trash controls. Manage local copies, exports, scanner files, and other backups separately. For questions about personal information held through support correspondence or website operations, contact us. We will review applicable access, correction, deletion and consent-withdrawal requests, and explain any legal retention requirement or limit on what we can access. Support correspondence and operational information are retained only for service, security, legal or dispute purposes for as long as needed for those purposes; hosting providers control their own operational log schedules. You can complain to the privacy regulator with jurisdiction over your situation; contacting us does not remove that right. We cannot recover a forgotten profile password or decrypt your backup for you. Provider deletion and retention rules apply to information held by that provider. 8. Your security choices Use a strong, unique profile password, keep your device protected, and lock or log out of BillNest on shared devices. Keep private exports out of shared folders and keep a separate recovery backup. Encryption does not protect readable exports or information visible while your profile is unlocked. No storage or security method guarantees against every loss or unauthorized access. These limits do not remove BillNest’s legal duties to safeguard information it controls or to assess, record, report and notify about breaches when applicable law requires. Only store information appropriate for your business and the permissions you hold. Availability of employee fields is not a certification that BillNest meets a particular regulated recordkeeping standard. 9. Questions and changes Use Contact us for privacy questions, requests, or concerns. We aim to provide an initial response within 24–48 hours; this is not a guaranteed response time or emergency service. We may update this policy when the app changes; the date on this page identifies the latest update. Changes to Google data use will be disclosed before requesting any new access. Optional Telegram receipt delivery If you link Telegram, Telegram receives and stores messages and files sent to the bot under its own policies. Bot chats are not Secret Chats. Each linked Telegram account routes to one private BillNest inbox. BillNest stores the chat identifier, hashed access and pairing credentials, temporary pairing display name, delivery identifiers, file reference, filename, caption, size and timestamps. Do not send receipts for a different business to a linked account. BillNest retrieves originals from Telegram through its server when your browser imports them. The server does not persist the original file or extracted text. Text recognition happens on your device; the original and suggestions are saved in your encrypted profile before the delivery is acknowledged. You must review and approve before creating an expense or contractor invoice. No paid AI or external OCR service is used. Imported file references, names and captions are cleared from the delivery queue. Delivery entries expire after 30 days and are deleted during subsequent service activity. Linked account identifiers remain until disconnected. Expired pairing details and old unused inboxes are cleaned up during subsequent activity. Disconnecting stops new delivery; it does not delete Telegram messages, pending receipts or saved records. Manage Telegram messages in Telegram and saved business records in BillNest. Your private inbox access key is stored inside your encrypted profile and encrypted backups. Readable record exports omit this key. Restore or synchronize the same profile to use saved receipts on another device; Telegram delivery alone does not synchronize your records. Keep backups and your password private. Service and file limits apply; keep originals until safely saved and backed up.