Privacy Policy

1. Information we handle

• Account information: tenant name, username, contact email, users, roles, subscription, and status.
• Business information: business profile, GSTIN, addresses, contact details, invoice settings, and branding.
• Invoicing information: customers, products or services, invoice details, tax data, totals, and optional receipt information.
• Security and technical information: login activity, audit events, IP address where recorded, browser requests, errors, and service logs.
• Support information: messages and details supplied when requesting help.

2. Why we use information

We use information to:

• provide, secure, maintain, and improve the invoicing service;
• authenticate users and keep tenant accounts separate;
• create requested invoices, PDFs, reports, exports, and secure sharing links;
• manage subscriptions, support, service notices, and operational communication;
• prevent abuse, investigate incidents, and maintain audit history; and
• meet legal, regulatory, tax, security, or lawful government requirements.

3. No promotional sale or sharing

We do not sell tenant, customer, or invoice data. We do not share that data with third parties for their independent advertising, promotional campaigns, or marketing lists.

4. Necessary service providers

Limited information may be processed by trusted providers that help operate the service, such as hosting, storage, security, email, or technical support providers. They receive only the access reasonably needed for their function and are expected to protect the information and not use it for their own promotion.

5. Lawful requests and protection

We may preserve or disclose information when reasonably necessary to comply with applicable law, a court order, a valid request from a competent government or law-enforcement authority, or to establish, exercise, or defend legal claims. Where lawful and practical, requests are reviewed for appropriate authority and scope before disclosure.

6. Subscriber responsibilities

Each subscriber decides what customer and transaction information is entered into its tenant account and is responsible for having a lawful business reason and appropriate authority to use it. Tenant administrators control authorized user access. Customer data is not available to other tenants.

7. Security

We use account authentication, tenant isolation, access controls, protected actions, secure password handling, validation, and operational monitoring appropriate to the service. No internet service can guarantee absolute security, so users should protect credentials and promptly report suspected misuse.

8. Retention and backups

Information is retained while needed to provide the subscription, preserve finalized invoice history, meet legal or security obligations, resolve disputes, and maintain legitimate business records. Operational backups may retain protected copies for a limited recovery cycle after live data changes. Backups support recovery but do not guarantee restoration in every event.

9. Cookies and sessions

The service uses essential cookies or similar session mechanisms for login, security, and normal operation. We do not use tenant invoice data to build third-party advertising profiles.

10. Access and correction

Authorized users can review and correct much of their account and business information within the service. Requests concerning access, correction, or account-related privacy can be made through the support contact provided with the subscription. Some finalized invoice and audit information may need to be retained for integrity, security, legal, or compliance reasons.

11. Children

The service is intended for businesses and authorized business users, not for independent use by children.

12. Updates

We may update this policy when the service, law, or privacy practices change. The latest version and updated date will be published here. Indian digital personal-data law can be reviewed on India Code.