Who is responsible and scope
SETROO LLC, registered in Wyoming, United States, operates Billion platform accounts. This policy covers account creation, sign-in, account administration and security help at meetbillion.com/login. Contact privacy@meetbillion.com for privacy and data requests. This does not replace the privacy policy of a store you shop with: merchants are responsible for their customer notices, and store-data and integration processing depends on the services enabled and their agreements.
Information and purposes
We collect your email and store name, and a password when you choose email registration stored as a one-way cryptographic derivation, not readable text. We keep account, store and company identifiers, email verification time, the accepted terms version and acceptance time, and a network-address fingerprint for security. We also process sessions, sign-in and recovery attempts, language and appearance preferences, and technical information such as network address and request time in the hosting infrastructure. We use this to provide the account you requested, send verification and security messages, prevent abuse and protect the service. Registration does not subscribe you to marketing.
Processing and sharing
We process information needed to create and provide your account, protect the service and prevent fraud, and meet legal obligations where applicable. Railway provides hosting and the database; Resend delivers operational email. If you choose Google, Google verifies your identity for sign-in or starting registration. We verify its signed identity and verified email, and retain the Google account identifier linked to your Billion account. Linking an existing Billion account also requires its credentials; creating a new account requires completing its details and explicitly accepting the terms. We do not request Gmail or Drive access, store Google passwords or change your Billion email or permissions. This infrastructure and its suppliers may process information outside your country. We do not sell registration data. We share it only as needed to provide the service, as you direct, or when required by law. Using the platform does not waive your statutory rights.
Local storage and retention
Sign-in uses browser local storage for the administration session and language and appearance preferences; you can sign out or clear it. Verification and recovery links expire after 30 minutes and work once; the service stores their hash, not the original link. Expired links and attempt-limit records are cleaned after approximately one additional day by periodic maintenance. Completed email jobs are removed after one day, failed jobs after seven days from these job tables. Infrastructure logs, email-provider records and backups may have different retention. Account and acceptance data remain while the account exists or as needed for security, obligations and disputes. We review deletion requests and explain necessary exceptions.
Sign in with Apple
If you choose Apple, we verify its signed identity and, when available, a usable verified email. Otherwise we do not rely on that email and offer verified contact email for a new passwordless account, or optional linking after proving ownership of an existing account. We retain the Apple identifier linked to your Billion account. You may choose an Apple private relay address; we do not change your existing Billion email or permissions. We do not request iCloud, photos or contacts access, or store your Apple password. Linking an existing account is a separate choice requiring proof of ownership; creating a new Apple account requires no Billion password but does require completing its details and explicitly accepting the terms. Apple verification alone creates no store. To protect the return from Apple, we use secure cookies unavailable to JavaScript, expiring after five minutes for authorization, two minutes for retrieving its result, and ten minutes for linking an existing account when verified email is unavailable. Return proofs are single-use; expired records are removed on a subsequent Apple attempt.
Your rights and requests
Contact us to request access, correction or deletion of account data, object to or restrict processing, or request portability where the law provides these rights. We verify identity and authority before disclosure or deletion and respond within applicable legal time limits. Some records may need to remain for legal or security reasons. Never email passwords, verification codes or reset links. You may also contact your competent data protection authority where provided by law.
Security and updates
We use HTTPS, password derivation, time-limited single-use links and verification and recovery attempt limits. No service guarantees absolute security: protect your inbox and device and do not share credentials. We publish dated policy updates and communicate material changes through appropriate channels. A policy update is not automatic permission for a new purpose that requires separate consent.
Billion account passkeys
If you optionally add a passkey, we retain its public key, a random identifier linked to your administration account, its label, creation and use times, revocation state and sync-capable device type. We do not receive your fingerprint, face image, device PIN or private key. Your password manager may sync the key according to your settings and its provider terms. We verify a signature bound to meetbillion.com and local user verification. Setup and sign-in challenges are single-use, expire after three minutes and are bound to a secure cookie unavailable to JavaScript; expired records are cleaned on a subsequent attempt. Adding, renaming or revoking requires sign-in verified within five minutes. Revoking here prevents future use, but does not delete the key from your device or end existing sessions. Existing sign-in and recovery methods remain available.