Legal
Privacy Policy
Last updated 3 August 2026
What we collect
Account details you give us: your name, email address, and optionally your mobile number. Business details you enter: business name, GSTIN, PAN, address, and bank or UPI details you choose to print on invoices. Billing data you create: customers, items, invoices, payments, and stock movements. Technical records: sign-in times, IP address, and browser information, kept for security.
How we use it
To run the service you signed up for: generating your invoices, calculating tax, producing reports, and processing subscription payments. To contact you about your account, and to answer support requests. We do not sell your data, and we do not use your business or customer data to train models.
Who else sees it
Our payment gateway sees what it needs to process a subscription charge. Our email provider sees the address and content of messages we send on your behalf. Our hosting provider stores the database. Each is bound by its own agreement with us and processes data only on our instruction. We disclose data to authorities only where the law requires it.
Your customers' data
When you add a customer, you decide what to store about them and you remain responsible for having a lawful basis to do so. We process that data on your behalf and only to provide the service.
How long we keep it
For as long as your account is open. If you close it, we keep invoice records for the period tax law requires them to be retained, then delete them. You can export everything as CSV at any time before closing.
Security
Passwords are stored as bcrypt hashes and are never recoverable in plain text. Sessions use signed tokens in httpOnly cookies. Access to your data is scoped to your own business and checked on the server for every request. No system is perfectly secure, so we encourage a strong, unique password.
Your choices
You can view and correct your details in settings, export your data as CSV, and ask us to delete your account. Write to support@gstbillingpro.in and we will respond within 30 days.