OC Billing

Privacy policy

OC Billing is invoicing software used by independent trade businesses. This policy covers what we hold and why.

Last updated 2026-09-23. OC Billing is operated by MDMD Investments, LLC.

Who the information belongs to

Two different people appear in OC Billing. A business subscribes to the software. That business's customers receive invoices and estimates. A business's customer records belong to that business; we hold them on its behalf and do not use them for our own purposes.

What we collect

From a business
Name, business name, email address, phone number, mailing address and the payment details its card processor needs. We never store full card numbers.
From a business's customer
Name, address, email address and phone number as the business entered them, plus the invoices, estimates, photographs and payments attached to that job.
From anyone who signs up for texts
The mobile number, the name given, the exact wording agreed to, the date and time, and the network address and browser the form was submitted from.

Text messaging

Text messaging originator opt-in data and consent will not be shared with any third parties, affiliates, or partners for marketing or promotional purposes.

We keep a record of every opt-in and opt-out so that we can show, for any number, exactly what was agreed to and when. That record is used to decide whether a message may be sent, to answer a carrier or a regulator, and for nothing else. Our messaging carrier receives only what it needs to deliver a message. We do not sell phone numbers, and we do not send marketing texts.

Who else sees it

Only the services that make the product work: hosting and database, email and text delivery, card processing, and file storage. Each is bound to use the information only to provide that service. We do not sell personal information, and we do not share it for advertising.

How long we keep it

Business and invoice records are kept while the account is open and for as long as tax and accounting rules require afterwards. Consent records outlive the consent itself — an opt-out is kept, not deleted, because it is the proof that we were told to stop.

Your choices

Security

Information is encrypted in transit and at rest. Customer invoice links are signed and unguessable, and are never indexed by search engines.

Children

OC Billing is for businesses. We do not knowingly collect information from anyone under 16.

Contact

MDMD Investments, LLC — help@ocbilling.com.