Privacy policy
Updated 25 October 2026. Samet Ateşen, trading as Atesen Software, Sakarya, Türkiye, operates Billsift. Contact support@atesensoftware.com.
Xero data and purpose
We read unpaid bills with supplier names, bill numbers, references, dates, amounts, line items and tracking; tracking categories/options; bank accounts and organisation currency/lock settings. This provides bill filters, allocated totals, exports and requested batch payment creation/deletion. Xero sign-in supplies your user id, name and email. We do not sell data or use Xero data to train AI/ML.
Storage and deletion
OAuth tokens, session bill snapshots and job plans are encrypted in Cloudflare D1. Snapshots expire after 24 hours and are removed on Sign out or Disconnect; Refresh replaces the snapshot. Unrun previews expire in 24 hours. Completed plans, including bill and bank details, remain for the 30-day undo window. Details and result CSV access then expire.
Disconnect immediately deletes tokens, encrypted plans and cached bill details and attempts Xero revocation. Last disconnect deletes the user account; orphaned accounts are removed within 30 days. Batch rows, job records and audit events retain ids, timestamps and outcome codes for 365 days, without supplier names or amounts. Rate counters last a few days.
Billing and service providers
Paddle is merchant of record. We retain customer, subscription and transaction ids plus plan dates and usage, never card data. Event receipts remain 400 days. Purchase/welcome deduplication records remain to prevent duplicate application or email. Cloudflare hosts the service and database; Xero supplies authorised accounting data; Paddle processes billing; Resend may send one plain-text purchase thank-you. Its recipient address is read from Paddle for that send and is not stored by Billsift. It contains no tracking pixel or redirect.
Cookies and logs
cl_session is an HttpOnly 14-day sign-in cookie; cl_oauth lasts ten minutes. cl_src stores referring host, landing path and UTM tags for 30 days, suppressed by Do Not Track or Global Privacy Control. There are no advertising scripts, analytics scripts or third-party cookies. Logs contain event codes and counts, never tokens, bill details or names.
Your choices
Use Disconnect to remove the connection and encrypted details. Contact support for access, correction or deletion requests. Some billing records may be retained for legal obligations. Our providers may process data internationally under their contractual protections. We use data to perform your service contract, maintain security and fulfil legal obligations. Contact us about applicable privacy rights or your local data protection authority.


