Last updated: February 15th, 2023
This Supplemental Privacy Notice applies to you only if you are a natural person and live in California, Colorado, Connecticut, Virginia, or Utah. This Supplemental Privacy Notice is incorporated into and forms part of the BILL Privacy Notice.
This Supplemental Privacy Notice describes how we collect, process, and disclose your personal information. It also describes the rights you may have, depending on the state of your residence, with regard to your personal information, which apply when new or updated laws take effect in these states. This Supplemental Privacy Notice does not apply to any employees, owners, directors, officers, or contractors of BILL or its affiliates.
During the past twelve (12) months, we have collected, used, and disclosed the following categories of personal information:
We do not knowingly collect or use personal information of anyone under the age of 16.
When we collect government identification (such as your driver’s license number or Social Security number) or financial details (such as your bank account or credit card numbers), we are deemed to be collecting data that is “sensitive” under state privacy laws. Where legally required, we will obtain your consent for collecting this information. For our California users, we do not use or disclose sensitive personal information for any purpose that requires an opt out, such as to provide the Services to you, to detect security incidents, and protect against malicious or fraudulent actions, nor do we use or disclose such information to build a profile about you.
We retain your personal information as long as it is necessary to provide you our Services and to comply with our data retention requirements, including to comply with legal and regulatory obligations. Even after you stop using the Services, we may be required to keep your information for as long as necessary to comply with legal and regulatory obligations, to make or defend legal claims, and to protect against fraudulent activity of others.
Consistent with our practice of not collecting data on anyone under 16 years old, we do not have actual knowledge that we shared information on such minors with the companies we work with on targeted advertising.
Subject to certain limitations and depending on your state of residence, you have the following rights with respect to the personal information that we collect about you:
You can request to exercise your right to know, delete, or correct your personal information by emailing email@example.com or by initiating a chat with our Support Team here. If you do not receive a confirmation of our receipt of your request within 10 days, we may not have received your request and you should re-submit it. Once we receive your request, we will attempt to verify your identity. We may ask you for additional information to help us verify your identity, including by asking you to confirm other personal information you have provided to us. We may deny your request for reasons permitted by law, including our inability to verify your identity. If we deny your request, we will tell you why we did so.
Subject to certain restrictions, you can have an agent exercise your rights for you. If you have an agent exercising your rights, that person must provide to us your written authorization allowing them to make such a request on your behalf. We reserve the right to deny the agent’s request if we are not reasonably able to confirm proper authorization and/or verify your identity as the requestor.
Residents of Colorado, Connecticut, and Virginia can appeal a refusal to take action on a request by contacting us by email at firstname.lastname@example.org.