Privacy Policy

1. Who we are

PayMyBill is operated by Bevario Holding Ltd, registered at Okeanidos 36, Agios Athanasios, 4103, Limassol, Cyprus ("PayMyBill", "we", "us"). This policy explains what personal data we collect when you use our WhatsApp, Telegram, email or web ("Cabinet") services, why we collect it, and what rights you have over it.

2. What we collect

• Invoice content — photos, PDFs or forwarded emails you send us, and the supplier name, amount, IBAN/sort code and account number we extract from them.
• Contact identifiers — your Telegram ID, WhatsApp number, and/or email address, depending on which channel you use.
• Payment data — payment initiation records via our open banking partner. We never receive or store your online banking credentials.
• Billing data — card details are collected and stored directly by our payment processor (Stripe); we only retain a tokenised reference, never the full card number.
• Usage data — invoice/payment history, credit balance, and basic technical logs (timestamps, error logs) needed to operate the service.

3. How we use it

We use this data to: read and verify the invoices you send us; check the payee's bank details against supplier records before initiating payment; initiate the bank-to-bank payment once you approve it; maintain your credit balance and billing history; provide invoice/payment exports; and provide customer support.

4. Legal basis for processing

We process your data to perform the contract between you and PayMyBill (initiating payments you request), to comply with financial recordkeeping obligations, and, where applicable, based on your consent (e.g. optional email marketing) or our legitimate interest in preventing fraud and misdirected payments.

5. Who we share it with

We use regulated third-party processors to run the service, including: an open banking payment initiation provider to move money between bank accounts; a payee/IBAN verification provider to check supplier bank details; Stripe for credit-package billing; a document/vision processor to read invoice content; and Unipile to route WhatsApp, Telegram and email messages. Each acts under its own data protection obligations and only receives the data needed to perform its function. We do not sell your personal data.

6. International transfers

Our primary database is hosted in the EU. Some of the processors above may process data outside the EU/EEA; where that happens, we rely on appropriate safeguards such as Standard Contractual Clauses.

7. Data retention

We retain invoice and payment records for as long as your account is active, and afterwards for the period required by applicable financial, tax and anti-fraud recordkeeping obligations. You can ask us to delete your account data at any time, subject to those legal retention requirements.

8. Your rights

Subject to applicable law (including GDPR), you have the right to access, correct, export, or request deletion of your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with your local data protection authority.

9. Security

We use encryption in transit and at rest, and never see or store your online banking credentials — your bank authenticates every payment directly. Access to customer data is restricted to what's needed to operate the service.

10. Cookies

This website does not use advertising or third-party tracking cookies.

11. Children

PayMyBill is a business payments tool and is not directed at, or intended for use by, children.

12. Changes to this policy

We may update this policy from time to time; the "last updated" date above will reflect the latest revision.

13. Contact

Bevario Holding Ltd, Okeanidos 36, Agios Athanasios, 4103, Limassol, Cyprus — [email protected]