BilluminateBilluminate

Transparency

Transparency

How we work. Which sources we use, how we handle data, what we do when someone asks us to remove something. Open, without qualifications.

01 · Sources

What we collect, and from where

Bill draws knowledge from the public web. Examples of sources we review today:

Authorities

FinansinspektionenKonsumentverketKronofogdenARNSkatteverketPensionsmyndighetenIMY

Banks and credit providers

SwedbankHandelsbankenNordeaSEBSBABLänsförsäkringar BankNordnetAvanza

Insurance

IfTrygg-HansaFolksamLänsförsäkringarDina Försäkringar

Debt collection and creditors

IntrumAlektumSergelLowell

Industry and consumer organizations

Svenska BankföreningenSvensk FörsäkringAktiespararnaHyresgästföreningen

This list is not exhaustive, and Bill does not necessarily use every source for every answer. We do not publish a complete list of companies we hold knowledge about, Bill is a knowledge infrastructure, not a database. If you want to know exactly what we have about your specific company, see section 08.

02 · Process

How we handle knowledge

  1. 01

    Collection from the public web, with full respect for robots.txt.

  2. 02

    Verification by our verification team. We don't use anything we haven't reviewed.

  3. 03

    Synthesis we create answers, we don't republish text verbatim. This is how Bill differs from training-data-based language models.

  4. 04

    Structuring in the knowledge layer, with citations down to individual answers.

  5. 05

    Ongoing updates when source material changes.

03 · Protocol

We follow the Robots Exclusion Protocol

robots.txt is an industry standard for how websites signal what may be indexed. Bill follows the protocol per RFC 9309.

If a page or section is excluded there, we don't collect from it. Anyone who wants Bill to stop collecting just needs to update their robots.txt. We respect that without argument.

04 · Takedown

Removal on request, without negotiation

We respect takedown requests. Always.

Type

SLA

Logos

Removed within 48 hours

Text content

Removed within 7 days

No legal dialogue. No conditions. We don't negotiate.

Send requests to privacy@billuminate.io. We confirm receipt within one business day.

05 · Logos

Nominative use

We use logos only for identification, so your customers know which company an answer relates to. This is nominative use under trademark law.

We don't imply any partnership. We don't use logos in marketing. We don't aggregate logos into a branded "company database".

If you want us to stop using your logo, email privacy@billuminate.io. It will be gone within 48 hours.

06 · Data and privacy

How we handle data

  • Storage within EU (Railway, Amsterdam)
  • Encryption at rest and in transit
  • GDPR compliance
  • AI provider as data processor under Standard Contractual Clauses. They don't train on your data.
  • Personal data stripped during collection where possible. If content looks sensitive, we'd rather not collect it.

07 · Certification

What we do, and what we don't do today

Today

  • GDPR compliance
  • • Industry security practice
  • • Data residency within the EU

Not today

  • ISO 27001
  • SOC 2

We're explicit about this. As we grow, we're considering ISO 27001. We're building our architecture so a future certification can be as smooth as possible.

08 · Ask us

Want to know what we have about your company?

Customers see this directly in their admin portal.

If you're not a customer, email privacy@billuminate.io with company name and corporate identity number. We'll get back to you within one business day with a summary.