What we know, and who sees it.

• Bills are public but anonymous. Your name is never shown with a bill.
• Payment details are shown only to signed-in users; invoices and receipts only to our reviewers.
• We use no advertising cookies and sell nothing to anyone.
• You can ask for a copy of your data or have it deleted at any time.

The data controller is Settlor, operated from Norway. Contact: [email protected].

• Account: email address, first name, a hashed password, and the time you signed up.
• Bills you post: title, story, category, biller, amount, currency, city, country, due date, the invoice file, and the payment details of the biller.
• Bills you settle: the bill you reserved, the amount and method you report, your receipt file, and any message you add.
• Technical: IP address, browser type and request logs kept by our hosting and network providers for security, and aggregate, cookie-free page statistics.

We ask you not to put names or other identifying details into bill stories, and we remove them when we spot them.

• To run the service (performance of a contract): showing bills, letting people pay them, emailing you when your bill is approved, settled or rejected.
• To prevent fraud and keep the site safe (legitimate interest): checking invoices and receipts, keeping logs, blocking abuse.
• To tell people about settled bills (legitimate interest): anonymised summaries such as "a power bill in Norway was settled" in Settlor's own channels.
• Anything else only with your consent, which you can withdraw.

• Everyone: the anonymised bill: title, story, category, biller, amount, progress, city and country.
• Signed-in users: additionally the biller's payment details, so they can pay.
• Our reviewers: everything above plus invoices, receipts, the first names on accounts and email addresses, strictly to verify bills and payments.
• Nobody else. We do not sell, rent or share personal data for marketing.

These companies process data on our behalf under data-processing agreements:

• Supabase (Lovable Cloud): database, sign-in and file storage.
• Cloudflare: network, security and cookie-free analytics.
• Resend: transactional email (approval, settled and rejection notices).
• Google Fonts: typefaces, loaded from Google's servers.

Some providers process data outside the EEA under standard contractual clauses or an adequacy decision.

• Account data: until you delete your account, or after three years of inactivity.
• Bills, invoices, receipts and payment details: twelve months after the bill is settled or rejected, then deleted.
• Reservations ("claims"): ninety days.
• Security logs: thirty days.
• Anonymised statistics (how many bills were settled): indefinitely.

Settlor sets no advertising or tracking cookies. Your browser keeps a sign-in token and small preferences, such as which bills you have skipped in the swipe deck, in local storage. Page statistics are collected without cookies and without identifying you.

Under the GDPR you can ask us to show you your data, correct it, delete it, hand it over in a portable format, restrict or object to how we use it. You can delete your account yourself from My page. For anything else email [email protected] and we will answer within a month. You can also complain to the Norwegian Data Protection Authority (Datatilsynet) or to the authority in your own country.

Data is encrypted in transit and at rest, access to documents is restricted by role, files are served through short-lived links, and we review access regularly. No system is perfectly secure; if a breach ever affects you we will tell you without undue delay.

Settlor is for adults. We do not knowingly collect data from anyone under 18.

We may update this policy; the date at the top tells you when. See also our terms of use.