1. Information We Collect
Account information
Name, email, phone number, company, billing address, and payment details (processed by our PCI-compliant payment partners — we never store full card numbers).
Subscriber data you upload
To deliver the Service, you upload ISP customer records, RADIUS sessions, Mikrotik configs, IP allocations, and usage logs. You remain the data controller; iBilling acts as a data processor.
Usage data
Pages visited, features used, error logs, IP address, browser type, and device information for security and analytics.
2. How We Use Your Information
- Provide, maintain, and improve the Service.
- Process payments and send billing notifications.
- Respond to support requests and troubleshoot issues.
- Detect fraud, abuse, and security incidents.
- Send product updates and (with consent) marketing.
3. Legal Basis
We process personal data under one of: contractual necessity, legitimate interests (security, product improvement), legal obligations (tax, telecom compliance), or your consent (marketing).
4. Sharing & Sub-processors
We share data only with vetted sub-processors necessary to run the Service — cloud hosting, payment processing, email delivery, and customer support tooling. We do not sell personal data. A current sub-processor list is available on request.
5. Data Retention
Account data is retained for the lifetime of your subscription plus 30 days for export. Backups are rotated within 90 days. You may request earlier deletion subject to legal retention obligations.
6. Security
- TLS 1.3 in transit, AES-256 at rest.
- Role-based access controls and 2FA for admin accounts.
- Annual penetration tests and SOC 2 controls in progress.
- Encrypted off-site backups in multiple regions.
7. Your Rights
Depending on your jurisdiction (GDPR, CCPA, etc.) you may have the right to: access your data, correct inaccuracies, request deletion, restrict processing, port your data, or object to certain processing. Email privacy@ibilling.com to exercise any right.
8. International Transfers
We may transfer data across borders for hosting and support. Such transfers use Standard Contractual Clauses or equivalent safeguards.
9. Cookies
We use essential cookies for authentication and analytics cookies (opt-out available) to understand usage. We do not use advertising cookies.
10. Children's Privacy
The Service is not directed at children under 16 and we do not knowingly collect their personal data.
11. Changes to This Policy
Material changes will be notified via email or in-app at least 14 days before they take effect.
12. Contact the DPO
Data Protection inquiries: privacy@ibilling.com.