Privacy Policy

QuickieBill is the controller of the personal data you provide to operate your account. For the personal data of your own customers that you enter into the Service, you are the controller and QuickieBill acts as your processor — see our Data Processing Agreement.

• Account data: your name, email address, and/or phone number, and login credentials.
• Business profile: your business name, address, VAT registration number, and Commercial Registration (CR) number, used to produce compliant invoices.
• Client and invoice data: the customer, item, and amount details you enter to create invoices, estimates, and credit notes.
• Payment data: subscription and billing details processed by our payment processor, Stripe. We do not store full card numbers on our servers.
• Usage and technical data: log data, device and browser information, and IP address, used for security and to operate the Service.

• To provide the Service — create and store your documents, generate ZATCA submissions, and deliver invoices.
• To process subscriptions, trials, and payments.
• To authenticate you and secure the Service (including one-time passcodes).
• To provide support and respond to your requests.
• To improve reliability and features, and to comply with legal obligations.

We process personal data where it is necessary to perform our contract with you, to comply with a legal obligation, to pursue our legitimate interests in operating and securing the Service, or on the basis of your consent where required. Where we rely on consent, you may withdraw it at any time.

We do not sell your personal data. We share it only with service providers (sub-processors) who help us run the Service under appropriate confidentiality and security obligations, including:

• Cloud hosting and storage (Amazon Web Services);
• Payment processing (Stripe);
• Email and SMS delivery (for notifications and one-time passcodes);
• ZATCA (FATOORA) — for the mandatory reporting/clearance of tax invoices you choose to issue.

We may also disclose data where required by law or a valid legal request.

Some of our sub-processors may store or process data outside the Kingdom of Saudi Arabia. Where personal data is transferred abroad, we take steps intended to provide an adequate level of protection consistent with the PDPL and to contractually bind recipients to appropriate safeguards.

We keep personal data for as long as your account is active and as needed to provide the Service. Because invoices and tax records must be retained under Saudi tax rules, we may keep certain document data for the retention periods required by law even after you close your account. When data is no longer needed, we delete or anonymise it.

We use technical and organisational measures — including encryption in transit, access controls, and audit logging — to protect personal data against unauthorised access, loss, or disclosure. No system is completely secure, but we work to protect your data and to notify you of significant incidents as required by law.

Subject to applicable law, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your data, subject to legal retention requirements;
• object to or restrict certain processing; and
• withdraw consent where processing is based on consent.

To exercise any of these rights, email privacy@quickiebill.com. You may also have the right to lodge a complaint with the competent Saudi data-protection authority.

The Service is intended for businesses and is not directed to individuals under 18. We do not knowingly collect personal data from children.

We use cookies and similar technologies to keep you signed in and to operate the Service. See our Cookies Policy for details.

We may update this policy from time to time and will note the “last updated” date above. Questions or requests? Email privacy@quickiebill.com.