Privacy Policy
Effective date: 2026-10-08
Who operates getcsbill
getcsbill is operated by CS Network and Security LLC. Contact us at csosa@csnetworkandsecurity.com about privacy, access, correction, export, deletion, or appeal requests.
Roles and information we process
For your account, billing, support, and security information, CS Network and Security LLC acts as the service provider responsible for operating getcsbill. For customer, invoice, work order, payment, expense, and accounting records that a business enters, the business generally decides why the information is used and getcsbill processes it on that business's instructions. We may process names, emails, business names, password hashes, subscription status, provider identifiers, encrypted optional Square connection tokens, records you enter, support messages, IP-derived rate-limit identifiers, security events, and technical logs. Do not enter card numbers, security codes, government identification numbers, medical records, or other sensitive information in notes or customer records.
Purposes and providers
We use information to provide the workspace, send requested invoices and account emails, verify accounts, manage subscriptions, respond to support requests, prevent abuse, maintain security, improve reliability, and meet legal obligations. Hosting and database infrastructure is provided through OpenAI Sites and Cloudflare. Stripe processes getcsbill subscription payments; Resend delivers transactional emails; Square processes customer card payments and hosts invoice payment pages only when a business connects its own Square account. These providers receive only the information needed for their services and may process it in the United States or other locations where they operate. getcsbill does not store full payment card numbers, sell personal data, or use customer records for targeted advertising.
Your business and its contacts
The business using getcsbill is responsible for having a lawful basis and any required permissions to collect, store, and email its contacts. Send only invoices and service messages that are accurate and expected. A person receiving an invoice should first contact the business shown on that invoice to correct its records; they may also contact us about getcsbill's handling of their information.
Cookies and local storage
Essential cookies maintain sign-in and help protect the service. Browser storage may keep interface preferences and installation information. We do not currently use advertising cookies. Stripe, Square, Resend, Cloudflare, and other providers may use their own cookies or privacy technologies under their policies.
Retention, deletion, and exports
Canceling a subscription stops future renewal but does not automatically delete business records. You can export a workspace backup from the app and can request deletion, correction, or access through the privacy methods below. We retain only what is reasonably needed while the account is active and afterward for billing, legal obligations, fraud prevention, security, backups, and dispute resolution. When retention is no longer required, records are deleted or de-identified using reasonable measures.
Privacy requests and appeals
You may submit a privacy request through the secure support form at /support or by emailing csosa@csnetworkandsecurity.com. Identify the right you are requesting (access, correction, deletion, portable export, or applicable opt-out) and use the account email so we can authenticate the request. We do not require you to create a new account to make a request. We may ask for reasonable verification and will respond within the period required by applicable law; where Florida privacy rights apply, that generally means an initial response within 45 days and a written appeal process. If we deny a request, reply to our decision by email with 'Privacy appeal' in the subject and we will review it.
Security and incident notices
We use HTTPS, password hashing, tenant access controls, protected administrative access, rate limits, input validation, and encrypted provider credentials. No service can guarantee absolute security. If we determine that a security incident requires notice, we will notify affected people and regulators as required by applicable law and provide the information required about the incident and contact method.
International processing, children, and updates
Our providers may process information in the United States and other locations where they operate. Contact us before uploading data subject to special residency, healthcare, education, or contractual requirements. The service is intended for adults managing businesses; do not register if you are under 18. This policy is reviewed at least annually and shows its current effective date; material changes will be communicated through the service or account email as appropriate.