Invoice2go Privacy Notice

Effective Date: January 1, 2023

At Invoice2go, LLC, we, along with our affiliates, successors, and assigns, including Cimrid Pty Ltd, (“Invoice2go”, “we”, “us”), respect the privacy rights of our online visitors (“users”), customers of our Service (“Customers”) and their actual and potential end customers (“End Customers”) (collectively with Customers and other users, “you” or “your”). We recognize the importance of protecting the information we collect about you.

This Privacy Notice applies to our websites, applications, promotions, products, and services (collectively, the “Services”), including all those that link to this Privacy Notice, and describes how Invoice2go collects, uses, shares, transfers, stores, retains, or otherwise processes your Personal Information. If an End Customer receives an invoice from one of our Customers and then comes to our website or application, or an actual or potential End Customer otherwise interacts with the Service, then the actual or potential End Customer is also subject to this Privacy Notice.This Privacy Notice also applies to any surveys, rewards, promotions, sweepstakes, contests, referrals, or other marketing activities conducted by Invoice2go or in connection with the Services (collectively “Invoice2go Marketing”).

Please remember that our Customers are small businesses who may have their own privacy practices. This Privacy Notice does not apply to any third party websites or services that Invoice2go does not own or control.

As used in this Privacy Notice, personal information means any information that relates to an identified or identifiable individual, and can include information about how you engage with our Services (e.g. device information, IP address). Capitalized terms not defined in this Privacy Notice have the meanings given to them in Invoice2go’s Terms of Service.

Invoice2go will share your information only as described in this Privacy Notice, or as permitted by law. Invoice2go will not sell, lease, rent, or trade your personal information to any third party for that party’s marketing or promotional purposes, unless you give your consent.

By continuing to use the Service or participating in Invoice2go Marketing after being provided with this Privacy Notice, you consent to Invoice2go’s policies and practices as described herein. If you do not agree with this Privacy Notice, please do not access our Services or otherwise interact with our business.

This Privacy Notice explains:

1. Sources and Types of Information We Collect About You

We collect your personal information from you directly, through your use of the Invoice2go Services and/or participation in Invoice2go Marketing, and from third parties.

Identification information. When you sign up for an Invoice2go account or otherwise correspond with us us, we collect contact and identifying information, including but not limited to your first and last name, phone number, e-mail address, billing address, tax identification number or social security number (collectively, “TIN”), date of birth (natural persons), government-issued identification (natural persons), and business information, including company name and address, formation documents, business license, tax documents, phone number and business email address. For service improvement, security, dispute resolution and training purposes we may monitor and record your communications with us (including email and telephone) in accordance with applicable laws.

US PATRIOT Act. To help the U.S. government fight the funding of terrorism and money laundering activities, federal and state law requires financial institutions, including money services businesses like Invoice2go, to obtain, verify, and record information that identifies every customer. When you use the Services, in addition to collecting your name, address, date of birth, and other information that will allow us to identify you, we may also ask to see your driver’s license or other forms of identifying documents, such as business related documents. We will let you know if additional information is required.

Financial Information. We collect payment card and billing information, including associated expiration billing address and expiration date and when you sign up for a paid Service. If you use Invoice2go Money for banking and other financial services, you authorize Invoice2go to access your bank account application information and information about your bank account, including account and routing numbers. If you are an End Customer paying an invoice, whether through Invoice2go Money or through a third party, Invoice2go and its Payment Partners receive certain personal information. Further details regarding personal financial information collected in connection with payments (including name on a credit card, cardholder postal code, the last four digits of a credit card number and certain other transaction information) is described in Section 7 (How We Store and Protect Your Information).

Information from imported contacts. If you choose to import contacts from your email account, including to invite those contacts to use the Services, we will collect the username and password for the linked email account, as well as the contact information for your contacts. We will only use this information for the purposes for which it is shared by you.

Promotions, Surveys and Feedback. We collect information about you when you choose to participate in surveys, rewards, promotions, sweepstakes, contests, events, referrals, or other Invoice2go Marketing or when you provide feedback about Invoice2go Services.

Information about your customers. We may collect information from you about your customers (“End Customers”), including but not limited to name, address, email address, phone number, TIN, and financial information, based on your use of the Service and payment instructions.

We may collect the following types of information from your use of the Invoice2go Service or website:

Device and Service Use Information. Anytime you use the Services (even if you are not registered for our Services), we may collect information about how you access or use the Services or input data. This information may include unique device identifiers, IP addresses, device or browser type, operating system, and device or browser preferences. For additional information about how we collect and use this information, see Section 2 (Our Use of Cookies and Other Third Party Technologies).

Inferences. We may derive inferences about you from the information we have collected (e.g. we may infer your geographic location from the IP address of device).

We may collect the following types of information from service providers or other third parties:

Information collected from social media. We may receive information about you when you interact with our Services through various social media, for example, by logging in through or “liking” us on Facebook or “following” us on Twitter. The types of information we receive depends on your privacy settings with the particular social network. You should always review, and, if necessary, adjust your privacy settings on third party websites, mobile applications and services before linking or connecting them to our Services.

Identify verification. We collect information about you from third parties as required and permitted by law, including but not limited to the purposes of verifying your identity and/or complying with anti-money laundering and anti-terrorism financing laws, “know your customer” regulations, and OFAC sanctions requirements.

Compliance and fraud. We collect information about you from third parties for purposes of fraud detection and prevention, in connection with certain types of investigations, or as otherwise permitted by law to ensure the safety and security of the Service.

Address and organization information. We collect information about you or your business from commercially available sources to ensure your account information, for example your address, is accurate and up-to-date.

Marketing. We collect information about current and prospective users of the Services from third party services, including but not limited to lead generation services and providers of customer and lead data, as well as enriched data about visitors to our website, all as permitted by law.

2. Our Use of Cookies and Other Third Party Technologies

Invoice2go and our authorized third-party service providers may use cookies and similar third party tracking technologies to collect certain types of personal information when you use our Services, visit our website, or visit websites that offer our Services. The information collected with these technologies helps us personalize your experience, enable content, measure the effect of our ads, prevent fraud, and enhance the security of our website and the Services.

You can disable or decline some, but not all cookies, because our website and Services rely on certain cookies to function properly. Some web browsers have an optional setting called “Do Not Track” (DNT) that allows you to opt-out of being tracked by advertisers and some third parties. Because many features of our website and Services cannot function without tracking data, we do not currently respond to global DNT settings.

Our use of cookies and other tracking technologies is discussed in more detail in our Cookie Statement.

3. How We Use the Information We Collect About You

To register your account. When you create an Invoice2go account or enroll as an Invoice2go account user, we use the information that we collect about you, including any identifying information or financial information, for purposes related to the review, establishment, provision, administration, maintenance, and monitoring of your Invoice2go account or your use of the Services. We also use this information to verify your identity and your eligibility to use the Services, and to comply with applicable law.

To provide the Invoice2go service. We use the information that we collect about you, together with information that you provide about your End Customers and the content that you upload to the Services to provide the Services to you in accordance with your instructions and Invoice2go account settings and choices. We also use your information to process payments requested by you and to provide you with transaction history and account information. We also use your information to provide, maintain and improve the Services to you and your actual and potential End Customers.

To provide customer support. We use your information to process and respond to your requests or inquiries, and to provide you with customer service, technical support, or software updates.

To diagnose or fix technology problems. We use your information to secure and protect the integrity of our network, help diagnose and troubleshoot potential hardware malfunctions, and otherwise ensure proper functioning of our Service.

To detect fraud. We use your information to detect and control unauthorized use or abuse of our Services and our other products and services, or otherwise detect, investigate or prevent activities that may violate our policies or be illegal.

To defend and/or prosecute legal claims. We may use your information to prosecute and/or defend a court, arbitration or similar legal proceeding, or to respond to lawful requests by public authorities (including national security or law enforcement requirements).

For research and development. We may use your information to analyze trends, administer or optimize the Services, monitor usage or traffic patterns (including to better understand how you use the Services), develop new products, features and technologies that benefit our customers and the public.

To communicate with you about the Services. We use your information to communicate directly with you, including by e-mail, SMS, push notification or phone, to send you transactional communications, respond to your questions, requests or comments, provide customer support, provide technical notices, updates, security alerts, and administrative messages. We also use your information to send you newsletters, promotions and special offers or information about new products and services in accordance with your marketing preferences. Your opt-out options for promotional communications are described below under Section 5 (Your Choice about your information).

To serve ads. We may use your information to deliver advertising to you, including to help advertisers and publishers serve and manage ads on the Service or on third party sites, and to tailor ads based on your interests and browsing history (please see Section 2 (Our Use of Cookies and Other Third Party Technologies) and Section 5 below (Your Choices about Your Information for additional information related to such advertising and your related controls).

With your consent. We use information about you where you have given us consent to do so for a specific purpose not listed above. As one example, we may publish testimonials or featured customer stories to promote the Services, with your permission.

Other legitimate business purposes. We may use the information that we collect about you as required or permitted by law. Such uses include but are not limited to compliance with anti-money laundering and anti-terrorism financing laws, “know your customer” regulations, and OFAC sanctions requirements.

Within our corporate family. We may share your information within our corporate family that includes Bill.com, LLC, Bill.com Canada, LLC, DivvyPay, Inc. and any subsidiaries and affiliates of these companies or our parent company BILL Holdings, Inc. As we grow and expand our Services and offer our Services in other countries, we may add to our corporate family.These companies will use the information in the same way as we can in accordance with our Privacy Notice in effect.

With our service providers. We may share your information with our service providers that perform services on our behalf, as needed to carry out their work for us, which may include providers of services for identifying and serving targeted advertisements, content or service fulfillment, or providing analytic, archival, auditing, accounting, legal, business consulting, banking, payment, delivery, data processing, data analysis, research, investigation, marketing, website or other technology services;

With your authorized third parties. At your direction, we may share your information with your third party vendors, service providers or agents.

With our Payment Partners. We may share your information with our Payment Partners and related integration partners, if you enable Invoice2go Money in order to receive payments from End Customers or use certain other financial products and services such as banking and debit card services (see Section 13 of our Terms of Service). In this case, we may provide the Payment Partners with certain information about the your business(es) and use of the Services for use by the Payment Partners, and the Payment Partners will collect or otherwise receive personal information about End Customers, all subject to the Payment Partners’ own privacy policies and terms. The Payment Partners may use this information for: (i) processing payments; (ii) underwriting; (iii) preparing internal reports to manage their business; (iv) data analytics, developing and analyzing data metrics, anonymizing personal data and other analysis purposes, and to publish in aggregated form the results of such analyses; (v) evaluating risk and providing fraud screening services to Invoice2go or third parties, including through risk and fraud modeling; (vi) processing and/or resolving chargebacks or other disputes; (vii) complying with applicable legal requirements and assisting law enforcement agencies by responding to requests for disclosure of personal data in accordance with local laws; and (vii) any other purpose for which the relevant individual’s consent has been provided.

With our Customers for whom you are their actual or potential End Customer in the context of the Service. For example, as an End Customer, we may share certain information about you with the Customer, such as whether you have opened an invoice or made a payment.

With our other partners. We may share your information with our Capital or Lending Partners (described in Section 14 of our Terms of Service), who may use it to provide you with opportunities for Capital or Loans in accordance with their own separate agreement or terms with you (which may be displayed through the Service or separately).

In connection with corporate transactions. We may share your information with other parties in connection with a company transaction, such as a merger, sale of company assets or shares, reorganization, financing, change of control or acquisition of all or a portion of our business by another company or third party or in the event of a bankruptcy or related or similar proceedings.

For compliance and harm prevention. We may share your information if we have a good faith belief that disclosure of such information is reasonably necessary to: (i) satisfy any law, legal process, or governmental request; (ii) enforce our Terms of Service, including investigation of potential violations thereof; or (iii) protect against fraud, imminent harm to the Service or the rights, property or safety of Invoice2go, our users or the public as required or permitted by law.

Any other person, with your consent to the disclosure.

Aggregated and Anonymized Data. We may share aggregated or anonymized data with third parties for other purposes. Such information is not Personal Information as it does not identify you individually, but may include usage, viewing and technical information we collected through our technology. If we are required under any applicable law to treat such information as Personal Information, then we will only disclose it as described above. Otherwise we may disclose such information for any reason.

5. Your Choices and Privacy Rights

End Customers should contact the relevant Customer with any requests regarding their information.

Managing your account. When you sign up for an Invoice2go account, you will create an account profile. You have options for managing your account information and communication preferences within your account. You can update certain account information and communication preferences at any time by logging into your account and changing your account settings. If you have any questions about reviewing or modifying your account information, you can contact us directly at the address provided in Section 12 (How to Contact Us).

Managing marketing communications. We will honor your request to opt out from receiving marketing communications from us. You can unsubscribe from promotional emails by clicking on the “unsubscribe link” provided in such communications. If you have opted in to receive text messages from us, you can opt-out at any time by texting STOP to 47864. You can also stop receiving communications from us by emailing us an opt-out request at [email protected].

We make every effort to promptly process all unsubscribe requests. You may not, however, opt out of Service-related communications (e.g., account verification, purchase and billing confirmations and reminders, changes/updates to features of the Service, technical and security notices) unless you terminate your account. Residents of some states and countries have additional privacy rights, which you can review in the relevant Supplemental Privacy Notices below.

6. How Long We Keep the Information We Collect About You

Retention periods can vary significantly based on the type of information we collect and how it is used. Invoice2go’s retention periods are based on criteria that include our ability to provide you with the Service or administer your Invoice2go account, legally mandated retention periods, pending or potential litigation, our intellectual property or ownership rights, contract requirements, operational directives or needs, and historical archiving.

7. How We Store and Protect the Information We Collect About You

Invoice2go uses commercially reasonable physical, technical, and organizational measures to help protect the confidentiality, integrity and security of all information collected through the Services. However, no security system is impenetrable and we cannot guarantee the security of our systems 100%. In the event that any information under our control is compromised as a result of a breach of security, Invoice2go will take reasonable steps to investigate the situation and where appropriate, notify those individuals or customers whose information may have been compromised and take other steps, in accordance with any applicable laws and regulations.

Password Security: Your passwords are an important element of our security scheme, and as such, you are responsible for maintaining the confidentiality of your password and account, and are fully responsible for all activities that occur under the password or account. You must report any misuse or compromise of your password to Invoice2go at the contact address provided in Section 11 (How to Contact Us) as soon as they become aware of any such misuse or compromise.

8. International Data Transfers

Your personal information may be transferred to countries located outside of your country or region, including to countries that may not provide a similar or adequate level of protection to that provided by your country or region. For example, if you are located in the European Economic Area (“EEA”), Canada, New Zealand, or Australia, we may transfer your personal information to the United States or other countries outside of the country of your residence. By using our Service or website or otherwise providing personal information to us, you hereby expressly consent to the transfer of your personal information outside your country or region.

For the transfer of personal information from the EEA to any countries not recognized by the European Commission as providing an adequate level of data protection according to EEA standards, we have implemented adequate measures to protect the personal information, such as by ensuring the recipients are bound by standard contractual clauses adopted by the European Commission.

9. Children’s privacy

Invoice2go does not knowingly collect or solicit any information from anyone under the age of 18 or knowingly allow such persons to sign up for an Invoice2go account. In the event that we learn that we have collected Personal Information from a child under age 18, we will delete that information where required by law. If you believe that we might have any Personal Information from a child under age 18, please contact us at the address provided in Section 11 (How to Contact Us).

10. Links to other web sites and services

Our Services may integrate with or contain links to other third party websites and services. We are not responsible for the practices employed by third party websites or services embedded in, linked to, or linked from the Services. Your interactions with any third party website or service are subject to that third party’s own rules and policies. You are responsible for examining third party websites’ privacy policies and for making your own decisions regarding the accuracy, reliability and correctness of material and information found.

11. How to Contact Us

If you have any questions or otherwise need to contact us in connection with this Privacy Notice or the Service, you can reach our customer support portal or our Privacy Team at [email protected] or contact us at:

Invoice2go, LLC.

Attn: Privacy Legal

6220 America Center Drive, Suite 100

San Jose, CA 95002

U.S.A.

12. Changes to Our Privacy Notice

This Privacy Notice may be updated periodically to reflect any changes in our business practices, services or the relevant laws. The Privacy Notice will be posted on our website, with an “Effective Date” legend at the top of the page indicating when it was last updated. Any changes are effective on the date that the updated Privacy Notice is posted.If the applicable law requires that we provide notice in a specified manner prior to making any changes to this Privacy Notice, we will provide such required notice. If you object to any changes to this Privacy Notice, you can cancel your account at any time. By continuing to use the Service or participating in Invoice2go Marketing after being provided with this Privacy Notice, you consent to the updated Privacy Notice.

13. US State Supplemental Privacy Notice to Residents of California, Colorado, Connecticut, Virginia, and Utah

14. Supplemental Notice for Residents of Australia, Canada, the European Union and the United Kingdom

Invoice2go Privacy Notice

Your Privacy

Required

Marketing Cookies

Required

Strictly Necessary Cookies

Functional Cookies

Performance Cookies

Marketing Cookies

Marketing Cookies