Privacy policy

Last updated 22 October 2026. This policy explains what personal data Kwikbill collects, why, and the rights you have over it. Questions to [email protected].

Who we are

Kwikbill is an invoicing service provided by Input IT Ltd (company number 04812979), 2 Horton Close, Leeds, West Yorkshire, LS13 1PJ, United Kingdom. We are the data controller for your account data. For the client, invoice and payment records a business keeps in Kwikbill, that business is the controller and we act as its processor.

What we collect

Account data: your name and email address, and a password if you set one (stored hashed). If you sign in with Google, Apple or Microsoft we receive only your name and email address from them; we never see your password for those services.
Business data: the business details, logo, clients, items, invoices, estimates, expenses, time entries, appointments and payment records you enter or import. Client contact details belong to your business and are used only to send and present the documents you create.
Payment data: if you connect Stripe or GoCardless so your clients can pay online, card and bank details go directly to that provider. Kwikbill never stores card numbers or bank account details.
Technical data: server logs with IP addresses and timestamps, kept briefly for security and troubleshooting. We set only the cookies needed to keep you signed in; there are no advertising or tracking cookies.

Why we process it

To provide the service you asked for (performance of a contract), to keep the service secure and respond to support requests (legitimate interests), and to meet our own accounting and legal obligations.

Where it is held

Kwikbill runs on servers in the United Kingdom. Every business's data is kept separate from every other business's. Backups are taken nightly and kept for a limited period.

Who we share it with

We do not sell personal data. It is shared only with our hosting provider, our email delivery systems (so your invoices and reminders reach your clients), and the payment providers you choose to connect. Clients receive your business details on the documents you send them.

How long we keep it

For as long as your account is open. You can delete your business or your whole account from Settings at any time; the data is removed from live systems immediately and from backups within 35 days, except records we must keep for accounting purposes.

Your rights

You can ask for a copy of your data (Settings → Export gives you most of it instantly), a correction, or deletion by emailing [email protected]. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

We will post any changes here and update the date at the top. Material changes are announced by email to account holders.