QuietBill is built to hold sensitive financial and contract data carefully.
- What we store: the receipts and documents you send, the structured data extracted from them (vendor, amounts, dates, clauses), and your account and workspace records.
- Isolation: every record belongs to a workspace, and access is restricted to that workspace’s members.
- Secrets at rest: session tokens and reset links are stored only as hashes; OAuth refresh tokens are encrypted with AES-256-GCM.
- In transit: all traffic is served over HTTPS.
- Email access: if you connect Gmail or Outlook, access is read-only and used solely to find receipts. You can disconnect anytime.
We do not sell your data. Uploaded PDFs and raw email payloads are retained so we can re-process or correct extractions. You can delete your account and all of its data from Settings at any time (see “Delete your account”), or contact us.