Privacy Policy

What we collect

• Shop owners: name, email, phone, shop name and address, and — if you enter them — GSTIN, FSSAI, drug licence and bank details used on your invoices.
• Shop customers: name and phone number, entered by the shop to run its khata. A phone number is used to send a one-time login code.
• Business records: products, bills, orders, payments and expenses you enter.
• Photos you upload: pictures of supplier bills and product images, taken with your camera or picked from your gallery. The camera is used only when you open the scanner or the photo picker yourself, and nothing is captured in the background.
• Your shop's location, only if you press “capture shop location” in Settings, and only to work out which addresses are inside your delivery radius. It is the shop's location, not yours, and it is never tracked or read while the app is closed.
• Compliance trail: when a registration or licence number on a shop profile was set or changed, by which account, and from which address.
• Consent record: which version of these terms your account accepted, when, and from which address.
• Technical: basic log data needed to keep the service secure and working.

How we use it

Only to provide the service: showing your data back to you, sending OTPs and reminders you trigger, processing subscription payments, diagnosing faults, and meeting a legal obligation where one applies to us. We do not use your data to train models, and we do not sell it. We do not use it for advertising, and we do not share it with advertisers or data brokers.

Who else sees it

Only service providers we need to operate: our hosting and database provider, the SMS provider that delivers OTPs, the email provider that delivers verification and password-reset mail, and Razorpay for subscription payments. Card details are handled entirely by Razorpay and never reach our servers. We also disclose data where we are formally required to by law, by a court or by an authority.

Deleting your account

You can delete your account and its data yourself, from inside the app: Settings → Account & security → Delete my dukaan. You will be asked for your password (or to confirm with Google) and to type your shop's name.

Nothing is destroyed on the spot. Your account is marked, and everything keeps working for seven days — a warning appears on every screen with a button to call it off, and we email you as well, so an account marked by somebody who is not you can be rescued. After that date the deletion runs and cannot be undone. Take a backup first; afterwards there is nothing left to export.

If you cannot sign in — a lost phone, a forgotten email, an app already uninstalled — ask us on the account deletion page, which needs no login.

What is deleted, and what is kept

Deleted: your login and every staff login under it, your products, stock, batches and price history, every bill, quotation, purchase and return, the khata and every customer and supplier record in it, expenses, orders, appointments, memberships, uploaded bill photos, and your public storefront.

Kept: the record of subscription payments you made to us, which we are required to keep as our own business and tax record — once your account is gone it carries no name, phone or email. Our administrative log of actions taken on the account is kept with every readable field (names, labels, IP addresses) removed. A wholesaler's own supplier-portal login survives: it is their account, not your shop's data, and other shops depend on it — but the record of their dealings with you, the note of whether they accepted or blocked your shop, is removed from it.

How long we keep everything else

For as long as your account is active. If you ask us to delete by email instead of using the button, we confirm who you are and then delete within 30 days. Tax records, the compliance trail and the consent record may need to be retained longer where the law requires.

Who is responsible for what

India's Digital Personal Data Protection Act, 2023 puts the duty on whoever decides why data is held. That is two different parties here, so it is worth being exact:

• Your own account — your name, email, number and shop details. BillVyse decides why these are held, so BillVyse is the Data Fiduciary and answers for them. Ask us.
• Your customers' names and numbers — the khata. The shop collected them and the shop decides what happens to them, so the shop is the Data Fiduciary and BillVyse is its Data Processor: we hold and process that list on the shop's instructions and for nothing else. A customer who wants their record corrected or removed asks the shop, not us.
• A wholesaler's supplier-portal login — their own account, created when they asked for a code on their own phone. No shop owns it, and BillVyse answers for it directly.

Your rights

You can access, correct or export your data from inside the app at any time, and you can delete it as described above. A shop's customers should contact that shop, which controls their khata record — the shop is the one who collected it and the one who can correct it.

For the data we are responsible for, you may also:

• Ask what we hold and who we have shared it with.
• Have it corrected or completed if it is wrong.
• Have it erased, unless a law requires us to keep it — see what is kept, above.
• Withdraw consent, as easily as you gave it. Withdrawing it for an account means closing that account, because there is no version of this service that runs without the records in it.
• Nominate someone to exercise these rights for you if you die or cannot act for yourself. Write to the grievance contact below with their name and number and we will record it against your account.
• Complain — to us first, and then to the Data Protection Board of India if we have not put it right.

Grievance contact

Write to [email protected], marked for the Grievance Officer. Tell us the number or email the account uses, so we can find it. We answer within 30 days, and normally in a few working days. If you are a customer of a shop and your request is about that shop's khata, say so and we will tell you how to reach the shop — we cannot change its records for it.

If something goes wrong

If personal data we hold is exposed or reached by someone who should not have reached it, we will tell the people affected and the Data Protection Board of India, without waiting to finish the investigation first. What we will say: what happened, what data was involved, what we have done about it, and what — if anything — you should do. Where the data belongs to a shop's khata, we tell the shop, because its customers are the shop's to inform and only the shop knows who they are.

The language this is in

The app, and the notice shown when you sign up, are offered in English, Hindi, Marathi, Bengali, Tamil, Telugu, Kannada, Malayalam, Gujarati, Punjabi, Odia and Urdu. This policy is written in English; if you would like it explained in any of those languages, write to the grievance contact above and ask.

Children

BillVyse is business software and is not directed at children. Accounts are for people aged 18 or over who are authorised to act for a business, and we do not knowingly collect data from children.

Security

Passwords are hashed, sessions use signed http-only cookies with CSRF protection, payment signatures are verified, and sensitive endpoints are rate limited. No system is perfectly secure, so please use a strong, unique password.