Privacy policy

Last updated 9 November 2026.

Who we are

Settlebell publishes UK money calculators and, for a signed-in business, tools to store invoices and send payment reminders. This policy is written for UK GDPR.

Accounts

If you create an account we store your email address, a hash of your password if you set one, and a session in our own database. A magic-link email contains a single-use token. We do not use a hosted login provider. You can export this data from the account page and you can delete the account, which removes the business, customers, invoices, files, and the email log.

Customers and invoices

Invoice chasing stores the debtor's name, email, address, and the invoice details you enter or confirm. That is personal data about your customer, and you are responsible for having a reason to hold it. We use it to show your dashboard and to send the reminders you configure. We do not sell it, and we do not use invoice contents to train our own models.

Files and invoice reading

A PDF or photo is stored only after you confirm the invoice. Text PDFs are read on the server. Photos and scanned PDFs are read on the server unless a hosted reader is switched on. If a hosted reader is on, the image is sent to that provider before you confirm the invoice, and that provider's own terms decide how long they keep it. We record that a read happened and an estimated cost. We do not put the image itself in that log.

What the calculators store

Calculator sums run in your browser. The figures you type are not saved as an account. A rough count of how often a calculator is used may be stored, with no name and no IP address kept in the database. If you download a demand letter, the PDF may be kept on the server for up to 24 hours so the download can be delivered, then deleted. It is not used for anything else.

Feedback

If you send a bug report or a feature request, we store the type, title, description, the page you were on, your browser's user-agent, the app version, and the time. An email address is stored only if you type one. A screenshot, if you attach one, is kept with the same file storage as invoice uploads. If you are signed in, the note is linked to your account. The purpose is to fix the product. We do not sell these notes. A confirmation may be sent to the email you gave, and a copy may be sent to the operator's contact address, through the mailer configured for the site.

Waitlist

If you join the list, we store your email address, the page you joined from, the wording you agreed to, and the time. The purpose is product news. There is no charge for joining. We keep the address until you ask us to delete it, or for 24 months from the signup if we have not written to you, whichever comes first. A confirmation may be sent to the address you gave.

Cookies and usage

The site does not set analytics or advertising cookies, and it does not send usage to Google Analytics or any other outside tracker. The cookie notice is remembered with local storage on your device. A signed-in session uses one strictly necessary cookie. See the cookie notice.

To see how the public beta is used, the server stores events in our own database. For a visitor who is not signed in, that is cookieless. We do not store the IP address. We store a hash of the IP address, the browser user-agent, a secret salt, and the UTC date. The hash changes the next day, so it cannot follow someone across days. Browsers that send Do Not Track or Global Privacy Control are not recorded. Known bots and crawlers are dropped. We store the page path, the referring website's domain (not the full address), any campaign tags on the link, a coarse device type, and a language region such as GB taken from the browser's language setting. That region is not a location lookup.

If you are signed in, product events can also store your account id. Those events are: a page view, a calculator opened or completed, sign-up started or completed, sign-in, an invoice added and whether that was typed, a spreadsheet, a PDF, or a photo, an invoice read confirmed and whether you edited the fields, a reminder scheduled or sent, feedback sent, and an error on a route. Event details are short labels only. They do not include invoice amounts, customer names, email addresses, or invoice numbers.

The purpose is to run and judge the beta, including whether enough people have tried the product. The lawful basis we rely on is legitimate interests. Raw events are kept for 13 months and are then replaced by daily totals that have no account id and no visitor hash. You can download the events linked to your account from the account page. Deleting the account removes that link. We do not sell this data.

Paid plans, later

Billing is switched off during the beta. If you ask to be told when paid plans open, we store the email address you type, the plan you picked, and the time. If you are signed in, the note is linked to your account. The purpose is to contact you about that launch. It does not start a payment. When billing is switched on later, card payments are taken by Stripe on Stripe's pages. This site would store a subscription status and a Stripe customer id, not the card number.

Payments

Letter-pack checkout is switched off. If it is switched on later, card details are handled by Stripe on Stripe's pages. This site would receive a payment status, not the card number.

Your rights

You can ask for a copy of the personal data we hold, ask us to correct it, or ask us to delete it. Signed-in users can do the export and the deletion themselves from the account page. You can complain to the Information Commissioner's Office. We do not sell personal data.