Security

Read-only keys

Every connection asks for the narrowest read-only or billing-read permission the provider offers, and the connect form says exactly which one. Billeak never changes anything in your provider accounts.

A few providers (DeepSeek, Moonshot, SiliconFlow) have no read-only keys at all. For those, the form says so and asks for a separate key that only Billeakuses, so you can delete it at any time without touching your app. We only ever call their balance endpoint with it.

Google Cloud needs no key: your budget sends its numbers to a private URL made for your connection.

Encrypted before storage

Keys are encrypted with AES-256-GCM before they reach the database, using a key that lives only in our server's secret store. Each ciphertext is bound to its connection, so it can't be moved to another one. Keys are never shown again, logged, or included in error messages.

No AI on your data

Detection is plain statistics on your own numbers. Nothing is sent to an AI service.

Webhooks you can trust

Calls to your webhook are signed with HMAC-SHA256 over a timestamp and the body, so your code can reject anything that isn't from us or is replayed. We only call public https addresses and never follow redirects.

Removing access

Delete a connection and its key is erased right away; its history follows after 7 days. You can also revoke the key at the provider at any time; we'll show the connection as broken.

Reporting a problem

Found something? Write to support@billeak.com. We answer every report.