BillMate has no user accounts and no project server. That is an architectural fact, not a policy promise, and it is the reason this page is short.
All of it. Projects, sections, items, dimension sheets, rate build-ups, your rate library, your firm name and letterhead, your preferences, and your Groq API key if you set one. These live in the application's storage on the machine in front of you, and there is no copy anywhere else.
We therefore never see your clients' names, your quantities, your rates or your totals. Not because we promise not to look — because there is nothing to look at.
This marketing site is static HTML with no third-party scripts, no advertising pixels, no embedded fonts loaded from another host, and no cookies set by us. Your market and currency preferences are remembered in your browser's storage. When analytics is enabled, the market you deliberately select may also be included in the limited anonymous events described below. We do not detect or record your physical location.
We count six things, and here they are. When you open the pricing page, the guide or a sample bill, choose a market, click through to the free app, or click a checkout button, the site sends one short message to our own endpoint. It records the event name, the page path, the market you chose, whether the button was Pro or Team, and a label for where on the page the button sat. That is the complete list — it is declared in the site's configuration and the endpoint refuses anything else.
Links from QS Fieldbook can attach the fixed source label “fieldbook” and an approved resource label to arrival, pricing and checkout-click events. These labels are kept in this tab for up to 30 minutes; no visitor identifier or raw referral URL is stored. Unknown campaigns use an “unknown” resource label.
What BillMate does not put in its analytics dataset: IP address, country, city, user agent, referrer, session or visitor id, cookies, project data of any kind. There is no cookie, advertising pixel, session identifier or visitor identifier, so we cannot link one event to another, to a browsing session, or to you. We can see that someone selected the Africa market and clicked Buy Team from the Nigeria page; we cannot see who they were, their detected location, or whether the same person clicked twice.
Events are sent to a BillMate-controlled endpoint running on Cloudflare Workers and stored in Cloudflare Workers Analytics Engine for up to three months. Cloudflare processes the requests as our infrastructure provider, but BillMate does not place IP addresses, user agents, referrers, detected locations or project information in the analytics dataset.
Local-only storage cuts both ways. If your device is lost, stolen, wiped or has its browser storage cleared, your projects go with it and we cannot restore them — there is no copy for us to restore from. BillMate reminds you to back up after 14 days and the entire dataset exports to a single file. How to back up properly.
The same applies to a shared or public computer: anyone with access to that browser profile has access to the projects in it. Treat the device as the security boundary, because it is.
Anything not covered here: support@billmate.site.