PlainBill legal

Privacy Notice

Effective September 21, 2026

1. Who controls your data

Asteria Works, LLC is the data controller for personal data processed through PlainBill. This Notice explains what we collect, why we use it, who receives it, and the choices and rights available to you.

2. Data we collect

  • Account data: email address, account identifier, login credentials in protected form, and subscription status.
  • Content data: bill text, links, files, prompts, generated summaries, titles, and source details you submit.
  • Support data: messages, requests, and other information you send when asking for help.
  • Usage and device data: interactions with PlainBill, browser and device details, IP address, timestamps, diagnostics, security events, and a browser identifier used to enforce the free-decode allowance.

Payment details are collected and processed by Paddle as Merchant of Record rather than by Asteria Works. We receive transaction and subscription details needed to provide your plan and support your account.

3. Why we use data and our legal bases

  • To create accounts, generate summaries, provide subscriptions, and support customers — necessary to perform our contract with you.
  • To secure PlainBill, prevent fraud and misuse, diagnose errors, and improve reliability and features — our legitimate interests in operating and improving the service.
  • To send service messages and respond to requests — contract performance and legitimate interests.
  • To meet tax, accounting, legal, and regulatory duties — compliance with legal obligations.
  • For optional analytics or marketing where required — your consent, which you may withdraw at any time.

4. Public content

Decoded bills and generated summaries are saved to PlainBill’s public library. Do not submit personal, confidential, or sensitive information in bill text or prompts. Public pages may be indexed by search engines and copied or shared by others.

5. Who receives data

We share data only as needed with:

  • hosting, database, artificial-intelligence, analytics, and customer-support providers;
  • Paddle, our Merchant of Record, for sales, subscriptions, payments, tax compliance, invoicing, refunds, fraud prevention, and customer service;
  • legal, accounting, and other professional advisers;
  • authorities or other parties when required by law or needed to protect rights; and
  • a buyer or successor involved in a merger, financing, reorganization, or sale.

We do not sell personal data.

6. Cookies and local storage

PlainBill uses essential browser storage and cookies to keep you signed in, remember a free decode, maintain security, and operate checkout. Where optional analytics or marketing technologies are used and consent is required, you can accept, reject, or withdraw consent through the available browser or consent settings. Blocking essential storage may prevent parts of PlainBill from working.

7. Retention

We keep account and subscription data while your account is active and for a reasonable period afterward to meet legal, accounting, fraud-prevention, and dispute-resolution obligations. Support and diagnostic records are kept only as long as reasonably needed. Public bill summaries may remain available to preserve the public library. When data is no longer needed, we delete or anonymize it.

8. International transfers

Our providers may process data outside your country, including outside the UK or European Economic Area. Where required, we use safeguards such as adequacy decisions, standard contractual clauses, or another lawful transfer mechanism.

9. Security

We use appropriate technical and organizational measures designed to protect personal data, including access controls, encrypted connections, managed infrastructure, and limited access based on need. No online system can guarantee absolute security.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a portable copy of your personal data; object to certain processing; withdraw consent; and appeal or complain to a regulator. UK and EEA requests are ordinarily answered within one month, subject to lawful extensions. Exercising a right will not result in unlawful discrimination.

Submit a request through the support channel included with your purchase or subscription-management page. We may need to verify your identity. You may also complain to your local data-protection authority.

11. Children and changes

PlainBill is not directed to children under 13, and we do not knowingly collect their personal data. We may update this Notice as our practices or legal obligations change and will post the revised effective date here.