BillLift is a community website where people can request help with bills and eligible expenses, and others can record nonbinding offers of support. This policy describes the information collected by the current website, why it is used, how it is shared and protected, and how to contact us.
Current payment status: BillLift does not currently collect, hold, send, or receive money on behalf of users. Offers are expressions of interest, not payments. BillLift does not presently collect payment card numbers or bank account details through its website.
Information we collect
Account information: email address, public display name, a securely hashed password, role, and account creation date. Requests for help: the request title, story/description, category, named provider, requested amount, optional due date, review status, and private administrative notes. Offers: the associated request, offered amount, whether the supporter chooses public or anonymous recognition, offer status, and submission date. Notifications: we record new offers and messages as private in-app alerts, including who triggered the alert, the related request, its date and read status. Users can remove alerts from their own inbox. Private conversations: message text, participants, the associated request and timestamps when a supporter and requester communicate through BillLift. Security and technical records: necessary session cookies, hashed identifiers for failed login attempts, and standard website or hosting logs. If you email BillLift, we also receive your message and contact details.
Please do not publish Social Security numbers, full bill account numbers, payment details, medical records, or other sensitive personal information in a request.
How we use information
We use the information to create and manage accounts, sign users in, review assistance requests, publish approved stories, display nonbinding offers, deliver private requester-supporter messages, show alerts about new messages and offers, provide customer support, investigate suspected misuse, maintain website reliability and security, and respond to legal obligations.
Who receives information and how it is disclosed
Public visitors: after a request is approved and published, visitors can see the requester's display name, story, provider, amount and any due date. Offer listings show the offered amount and either the supporter's public display name or an anonymous label. Material published on public web pages may be viewed or copied by others.
Authorized BillLift administrators: administrators can access account emails and the records needed to review submissions and offers. They can see the identities of supporters even when an offer is anonymous to the public. Private messages: only the two conversation participants may read a thread through the website; service administrators may access database records when necessary to provide support, investigate abuse, or meet legal obligations. Private messages are not shown publicly.
Hosting and technical service providers: BillLift uses Render to host the website and its database. Information is processed and stored by the hosting infrastructure to operate the site; pages and login forms transmit data through HTTPS. Legal and safety disclosures: information may be provided when required by valid legal process or when reasonably necessary to address abuse, security concerns or harm.
BillLift does not currently sell personal information or use it for targeted advertising. BillLift does not currently transmit user payment or banking details to payment processors through the website. If payment processing, identity verification or new technology partners are introduced, this policy will need updating before those features launch.
How we safeguard information
The current production application uses HTTPS, password hashing, signed and secure session cookies, anti-forgery checks on forms, restrictions on administrative functions, login rate limiting, and browser security headers. Private account records are separated from information approved for public display. These measures help reduce risk but cannot guarantee complete security. Additional controls, including multifactor authentication, account recovery and formal deletion procedures, are still planned.
Cookies, retention and requests
BillLift uses a necessary session cookie for sign-in and security. Our hosting provider may retain standard technical logs. We keep account, request, offer, private-message, and moderation records for service operation and applicable legal needs. A fixed retention schedule and self-service account deletion are not currently implemented. You may contact us to ask about access, correction or deletion of your information; requests will be reviewed subject to applicable obligations and technical limitations.
Children and changes to this policy
BillLift is designed for adults; age verification is not currently implemented. Do not submit children's information or sensitive personal records in public postings. We may update this notice when website practices change, and will update the date shown above.
Contact BillLift
For privacy questions, concerns, or requests about your personal information, email BillLiftHelp@gmail.com.