This Privacy Policy explains how BillAstra ("we", "us", or "our") collects, uses, stores, and protects your information when you use our GST billing, invoicing, POS and inventory platform (the "Service"). By using BillAstra, you agree to the practices described below.
- Information We Collect
- How We Use It
- Your Business Data
- Sharing & Disclosure
- Data Security
- Retention
- Your Rights
- Changes
1. Information We Collect
We collect only what we need to run the Service for you:
- Account information — your name, email address, phone number, and password (stored in encrypted form).
- Business information — business name, GSTIN, address, logo, and bank details you add to generate compliant invoices.
- Transactional data — invoices, quotations, purchases, parties, products, inventory, and payment records you create within the Service.
- Usage and device data — IP address, browser type, pages visited, and timestamps, collected to keep the Service secure and reliable.
- Payment data — handled by our payment partner (Razorpay). We do not store your full card or UPI credentials on our servers.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service and its features.
- Generate your invoices, reports, and GST filings.
- Authenticate you and protect your account against unauthorised access.
- Send you important service notices, billing reminders, and (with your consent) product updates.
- Respond to your support requests and diagnose technical issues.
- Comply with applicable Indian tax, accounting, and legal obligations.
We do not sell your personal information or your business data to third parties.
3. Ownership of Your Business Data
The business and transactional data you enter into BillAstra belongs to you. We process it solely to provide the Service on your behalf. You can export your data at any time from within the application, and you may request deletion of your account and associated data as described below.
4. Sharing & Disclosure
We share information only in limited circumstances:
- Service providers — trusted vendors (e.g. hosting, payment processing, email delivery, analytics) who process data on our behalf under confidentiality obligations.
- Legal compliance — when required by law, court order, or a valid request from a government authority in India.
- Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to you.
5. Data Security
We use industry-standard safeguards including encryption in transit (TLS), encrypted password storage, access controls, and regular backups. For more detail, see our Security page. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
6. Data Retention
We retain your data for as long as your account is active. After you close your account, we may retain certain records where required to meet tax, audit, or legal obligations under Indian law, after which they are securely deleted.
7. Your Rights
Subject to applicable law, you may:
- Access, correct, or update your personal and business information.
- Export your data in a portable format.
- Request deletion of your account and personal data.
- Opt out of marketing communications at any time.
To exercise any of these rights, contact us at hello@example.com.
8. Cookies
We use cookies and similar technologies to keep you signed in and to understand how the Service is used. See our Cookie Policy for details.
9. Children
The Service is intended for businesses and is not directed at individuals under the age of 18.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, notify you within the Service or by email. Your continued use of BillAstra after changes take effect constitutes acceptance of the updated policy.