Privacy Policy — Billow AI

This Privacy Policy describes how Billow AI ("Billow," "we," "us," or "our") collects, uses, stores, and protects personal information when users access or use the Billow AI application, including the Billow AI Excel add-in, Microsoft 365 integrations, and related services (collectively, the "Billow AI App").

This policy applies specifically to the Billow AI App submitted to the Microsoft Commercial Marketplace and does not describe general marketing websites or public web pages.

1. Information We Collect

The Billow AI App may collect or process the following types of information:

Personal Information Provided by Users

• Name
• Email address
• Organization name
• Role or job title
• Authentication-related details provided through Microsoft 365 sign-in

Application & Usage Data

When users interact with the Billow AI App, we may collect:

• Actions performed within the app (e.g., scenario creation, model interactions)
• Error logs and diagnostic information
• Performance metrics needed to operate the service

Content Processed Through the App

The Billow AI App operates inside Excel and may process:

• Financial models
• Scenario inputs and outputs
• Metadata required to perform calculations or return results

Billow does not access or use customer financial content for advertising, training third-party models, or unrelated purposes.

Technical Information

• Browser or client type
• Device and operating environment
• IP address
• Date/time of access

These are used for operational, security, and troubleshooting purposes.

2. How We Use Personal Information

We use personal information solely to operate and improve the Billow AI App, including:

• Providing core app functionality
• Authentication through Microsoft identity services
• Processing user requests (financial calculations, scenarios, etc.)
• Enhancing performance, reliability, and usability
• Troubleshooting issues and supporting users
• Maintaining security, auditing, and access controls

We do not sell or rent personal data.

We do not use customer data for advertising or marketing without explicit consent.

3. How We Store and Protect Information

We use industry-standard practices to safeguard data within the Billow AI App. These include:

• Encrypted connections (HTTPS/TLS)
• Access controls and authentication via Microsoft identity
• Isolated application environments
• Regular updates to platform dependencies
• Least-privilege access for internal systems

While Billow does not claim formal certifications, we incorporate best practices commonly found in enterprise SaaS applications.

4. Data Retention

We retain personal and application data only as long as necessary to:

• Provide the Billow AI App's functionality
• Comply with legal, contractual, or auditing requirements
• Support customer account and service continuity

Users may request deletion of their personal information, subject to applicable legal requirements.

5. Sharing of Information

Billow does not share personal information with third parties except:

Service Providers

Limited third-party vendors may be used for hosting, logging, or operational support. These providers only receive the minimum data required to perform their services and do not have access to customer financial models.

Microsoft Services

Authentication and permissions for the Billow AI App rely on Microsoft identity and Microsoft 365 APIs.

Legal Requirements

We may disclose information if required to comply with applicable laws, regulations, or lawful requests.

We do not provide customer data to advertisers or unrelated third parties.

6. User Controls & Rights

Depending on your organization's policies and your Microsoft 365 configuration, you may:

• Access and update certain profile information
• Request deletion of personal information
• Revoke the Billow AI App's permissions via Microsoft 365 admin controls
• Request a copy of stored personal information

Requests can be submitted to: philip@thebillow.ai

7. Children's Privacy

The Billow AI App is intended for business and enterprise use only.

It is not designed for or marketed to children under 13, and we do not knowingly collect personal data from children.

8. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or service. Updates will be posted at the URL hosting this policy with an updated "Last Updated" date.

9. Contact Information

For any privacy-related questions or requests, please contact:

Billow AI — Privacy Team
Email: philip@thebillow.ai