Encryption
Your information is encrypted in transit between your device and our servers, and at rest in our systems.
Security
What we do. What we don't.
An honest overview of how we protect your information. We keep it straightforward, and if something isn't in place yet, we say so.
What we do
Trusted infrastructure
We run on reputable, managed cloud and payment providers. Payment-card details are handled directly by our payment processor, we never store full card numbers.
Access controls
Role-based permissions and an activity trail across the Service, so the right people have the right access and key actions are recorded.
On the roadmap
Compliance posture
We treat security and compliance as an ongoing priority and continue to strengthen our controls over time. Happy to share where things stand on request.
Single sign-on
On our radar for teams that need centralized identity. Get in touch if this matters to you and we’ll share timing.
Advanced data controls
If you have a specific regulatory or contractual requirement, reach out, we’ll tell you honestly whether we can support it today.
What we don't
Sell your data
We monetize through a small platform fee on payments you collect (plus the optional Pro plan), no advertising, no data brokers, no sharing your data for third-party marketing.
Train AI on your records
The content you put into the Service is not used as AI training data by us or the providers we work with.
Lock you in
Export your data at any time, on any plan. Cancel and your data leaves with you, and you can request account deletion.
Found a vulnerability?
Tell us, we'll thank you.
We follow responsible-disclosure practices. If you've found a security issue, please email security@ghostbillpro.com with a clear description and proof of concept. Please don't post publicly or test against accounts you don't own.
We'll acknowledge your report, keep you in the loop while we look into it, and credit you publicly if you'd like.