Version 1.0 · Last Updated: June 2026

SpillBill ("SpillBill", "we", "our", or "us") operates a market research and survey platform that connects organisations ("Clients") with individuals ("Participants") to gather opinions, insights, and data. This Privacy Policy describes how we collect, use, disclose, and protect personal information when you access or use our website, applications, surveys, and related services (collectively, the "Services").

By registering for or using SpillBill, you acknowledge that you have read and understood this Policy. If you do not agree, do not use the Services.

1. Information We Collect

1.1 Account and Profile Information

When you create an account we collect:

• Full name or username
• Phone number
• Email address
• Date of birth
• Gender
• Occupation
• Household income bracket

Demographic information is collected to match you with relevant surveys. You may update this information at any time via your account settings.

1.2 Survey and Research Data

When you participate in a survey we record your answers and responses to survey questions, along with associated participation metadata such as timing.

1.3 Anonymous Survey Participants

If you participate via a public survey link without logging in, we do not collect your name, phone number, or email. We do store a session identifier to prevent duplicate submissions. This identifier cannot be used to identify you personally and is not linked to any account.

1.4 Identity Verification Data

To unlock rewards, some users undergo identity verification. This process is handled by a regulated third-party verification provider. We store only the outcome of the verification and do not retain any underlying identification documents or biometric data.

1.5 Payment and Incentive Data

To disburse earned rewards, we collect the payment details you provide. Full payment processing is handled by a regulated payment service provider. We retain records of reward amounts and transaction references for accounting and dispute resolution.

1.6 Automatically Collected Information

When you use our Services we may automatically collect:

• IP address and approximate location
• Device and browser information
• Session and usage information
• Diagnostic information

1.7 Communications

If you contact us for support, we retain the content of that communication and your contact details to respond and improve our Services.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Match you with surveys you are eligible for
• Deliver the survey experience
• Process and disburse incentive payments
• Generate anonymised research insights and analytics for Clients
• Detect and prevent fraud, abuse, and duplicate submissions
• Monitor and improve platform performance
• Comply with applicable legal and regulatory requirements
• Send transactional communications
• Improve and develop our platform and services

We do not use your personal information for behavioural advertising or sell it to advertising networks.

3. Automated Processing

SpillBill uses automated systems as part of delivering its Services. These systems are used to:

• Facilitate survey conversations and interpret your responses
• Assess the completeness and quality of submitted answers
• Personalise and adapt questions during a survey session
• Translate survey content into supported languages on request
• Evaluate completed surveys for research quality purposes
• Support internal quality-control and platform improvement activities

Automated processing is used to facilitate the research process and improve service quality. It is not used to make decisions that have legal or similarly significant effects on you. Your eligibility for any survey is determined by the research criteria set by our Clients, not by automated scoring alone.

Where automated processing involves third-party service providers, we maintain agreements with those providers that restrict how your data may be used.

4. Legal Basis for Processing

Where data protection law requires us to identify a legal basis for processing personal information, we rely on:

• Contract performance — to provide the Services you have signed up for, including delivering surveys and processing payments
• Consent — for optional profile data and communications; you may withdraw consent at any time
• Legitimate interests — for security, fraud prevention, analytics, and service improvement, where these interests are not overridden by your rights
• Legal obligation — to comply with applicable laws, regulations, and lawful orders

5. How We Share Your Information

5.1 Research Clients

Survey responses are shared with the Client that commissioned the survey. Clients receive response data in aggregated or de-identified form unless your participation was conducted under a named-respondent research engagement with explicit prior disclosure. Clients are contractually prohibited from re-identifying you or using your data for purposes outside the research engagement.

5.2 Service Providers

We engage third-party providers under data processing agreements to support the delivery of our Services, including infrastructure, payments, identity verification, communications, and platform operations. These providers may only process your data as instructed by us and may not use it for their own purposes.

5.3 Legal Requirements

We may disclose information if required by applicable law, court order, government authority, or where necessary to protect the rights, property, or safety of SpillBill, our users, or the public.

5.4 Business Transfers

If SpillBill is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a materially different Privacy Policy.

5.5 We Do Not Sell Your Data

SpillBill does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes.

6. Data Retention

We retain your information for as long as necessary to deliver the Services and meet our legal obligations. In general:

• Account information is retained while your account is active and for a reasonable period after closure, unless you request earlier deletion
• Survey responses are retained for research and compliance purposes and are deleted or anonymised once no longer required
• Payment records are retained as required by applicable financial regulations
• Verification status is retained for the duration of your account
• Session and participation identifiers are retained only as long as needed for the purpose they were collected

When retention periods expire, data is permanently deleted or irreversibly anonymised.

7. Cookies and Similar Technologies

We use cookies and similar technologies to maintain your session and enable core platform functionality. We do not use advertising or cross-site tracking cookies.

Session cookies are deleted when you close your browser. Persistent cookies used to keep you signed in expire after a set period of time.

You can manage or delete cookies through your browser settings. Disabling certain cookies may affect your ability to use the platform.

We may use analytics tools to understand how the platform is used in aggregate. This data does not identify you personally.

8. Security

We implement reasonable administrative, technical, and organisational safeguards to protect your information, including:

• Encryption of data in transit
• Encryption of sensitive stored data
• Access controls limiting who within our organisation can access personal data
• Secure hosted infrastructure with monitoring controls
• Access management and session controls
• Regular security reviews

No system can guarantee absolute security. If you believe your account has been compromised, contact us immediately at the address below.

9. Your Rights and Choices

Subject to applicable law, you have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — request correction of inaccurate or incomplete information
• Deletion — request erasure of your personal information, subject to legal retention requirements
• Portability — receive your data in a structured, commonly used format
• Restriction — request that we limit the processing of your data in certain circumstances
• Objection — object to processing based on our legitimate interests, including use of your data for survey targeting
• Withdrawal of consent — where processing is based on consent, withdraw it at any time without affecting prior processing

To exercise any of these rights, contact us at the address in Section 13. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

10. Children's Privacy

SpillBill is intended for users aged 16 and above. We do not knowingly collect personal information from children under 16 except as part of a lawful, age-appropriate research engagement with documented parental or guardian consent obtained by the Client.

If you believe a child under 16 has provided us with personal information without appropriate consent, contact us and we will delete that information promptly.

11. International Data Transfers

SpillBill may store and process your information in jurisdictions outside your country of residence. When we transfer personal information internationally, we implement appropriate safeguards to ensure that your information receives a level of protection consistent with applicable data protection law.

By using the Services, you acknowledge that your data may be transferred to and processed in countries whose data protection laws may differ from those in your jurisdiction.

12. Third-Party Services and Links

Our platform may contain links to or integrations with third-party services. SpillBill is not responsible for the privacy practices, content, or policies of third-party providers. We encourage you to review the privacy policies of any third-party service you access.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our Services, legal requirements, or business practices. Material changes will be communicated to registered users before they take effect. The updated policy will always be accessible on our platform with a revised "Last Updated" date.

Your continued use of the Services after the effective date of any update constitutes acceptance of the revised Policy.

14. Contact Us

For privacy inquiries, data rights requests, or complaints: