1. Scope and roles
When a company stores personal data about its own clients and staff in Bilify (names, emails, addresses on invoices), the company is the data controller and Bilify acts as a data processor on its behalf. This agreement forms part of the Terms of Service. Placeholder copy - to be replaced with reviewed legal text.
2. Details of processing
Subject matter: operating the invoicing platform. Duration: the term of the subscription. Nature and purpose: storage, display, and transmission of business documents. Categories of data: contact and billing details of the company's clients and staff. Data subjects: the company's clients, their contacts, and the company's employees.
3. Our obligations as processor
We process personal data only on the company's documented instructions, ensure confidentiality commitments from personnel, apply appropriate technical and organizational security measures, and notify the company without undue delay after becoming aware of a personal data breach.
4. Sub-processors
We use vetted sub-processors for hosting, email delivery, and payment processing. A current list is available on request. We will give notice of intended changes, giving the company the opportunity to object.
5. Assistance and data subject rights
We assist the company, insofar as possible, in responding to requests from data subjects and in meeting its security and breach-notification obligations.
6. Return and deletion
Upon termination of the service, we delete or return personal data at the company's choice, except where law requires continued retention of fiscal records.