Privacy Policy

Billy helps professionals track legislation and understand what changed between bill versions. We operate the Service for registered users and their workspaces. For privacy questions, contact us at awhitaker@gmail.com.

We collect information in the following categories:

• Account information. Email address and authentication data when you sign in with a magic link or Google OAuth. We may store a display name or similar profile fields you provide.
• Workspace content. Workspace names, membership, tracked bills, watches (keywords, citations, intents), annotations, AI summary corrections, notification preferences, and similar content you or your teammates create in a workspace.
• Usage and device data. Log data such as IP address, browser type, approximate location derived from IP, pages or features used, and timestamps. We use this to operate, secure, and improve the Service.
• Communications. Messages you send us (for example support requests) and transactional emails we send you (sign-in links, digests, alerts you enable).

Legislative bill text, statutes, and related public records we ingest are generally public government information, not personal data about you. We may associate that public material with your workspace activity (for example, which bills you track).

We use information to:

• Provide, maintain, and improve the Service (authentication, workspaces, tracking, redlines, summaries, notifications);
• Generate AI-assisted change summaries and related features, including sending relevant text to our model and embedding providers as needed to produce those outputs;
• Communicate with you about the Service, security, and changes to policies;
• Detect, prevent, and respond to fraud, abuse, and security incidents;
• Comply with law and enforce our Terms & Conditions;
• Analyze aggregate usage to understand product performance (we do not sell your personal information).

Billy uses third-party AI and embedding providers to produce evidence-grounded summaries, intent matching, and related features. When those features run, bill text and workspace-related inputs needed for the request may be transmitted to those providers under our agreements with them. Do not submit information to the Service that you are not authorized to process, including confidential client material beyond what your organization permits for this use.

AI outputs can be incomplete or incorrect. They are tools for review, not a substitute for professional legal judgment. See our Terms & Conditions.

We share information only as needed to run the Service:

• Service providers. Hosting, database, authentication, email delivery, analytics (if enabled), and AI / embedding providers that process data on our behalf.
• Workspace members. Content you put in a workspace is visible to other members of that workspace according to roles and product behavior.
• Legal and safety. When we believe disclosure is required by law, regulation, legal process, or to protect the rights, safety, or property of Billy, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.

We do not sell personal information or share it for cross-context behavioral advertising.

We retain account and workspace data for as long as your account is active and as needed to provide the Service, resolve disputes, and meet legal obligations. You may request deletion of your account as described below; some records may remain in backups or logs for a limited period.

We use administrative, technical, and organizational measures designed to protect personal information, including encrypted transit (HTTPS), access controls, and workspace-scoped authorization. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Depending on where you live, you may have rights to:

• Access, correct, or delete personal information we hold about you;
• Export certain account or workspace data;
• Object to or restrict certain processing;
• Withdraw consent where processing is based on consent;
• Opt out of non-essential emails (transactional messages such as magic links and security notices will still be sent).

To make a request, email awhitaker@gmail.com from the address associated with your account. We may need to verify your identity before fulfilling the request. If you are a member of someone else’s workspace, some content is controlled by that workspace’s administrators.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

We may process and store information in the United States and other countries where we or our providers operate. Those locations may have different data protection laws than your home jurisdiction. Where required, we use appropriate safeguards for cross-border transfers.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Material changes may also be communicated by email or in-product notice. Continued use of the Service after changes become effective constitutes acceptance of the updated Policy.

Privacy inquiries: awhitaker@gmail.com.

Related: Terms & Conditions.