DRAFT for review by a lawyer. Not in force yet. Text in [brackets] is to be filled in.

Privacy Policy

Last updated: [date]. [Company legal name] ("we") runs this billing service. Contact: [email], Grievance Officer: [name, email].

1. Two kinds of personal data

Your account: name, email address, password (stored only as a secure hash), optional two-step login, the businesses you belong to and your role, and login records (time, IP address, browser).
Data a business enters about its customers and staff: names, phone numbers, addresses, GSTINs, bills, payments, IMEI numbers. For this data the business decides what is entered and why; we process it on the business's behalf.

2. Why we use it

To run the service: log you in, keep each business's data separate, save bills, stock and reports.
To keep it secure: rate limits, a security log, alerts about password and two-step login changes, error reports with personal details removed.
We do not sell personal data, show advertising, or use it to train AI.

3. Who else handles it (on our instructions)

[Hosting provider] (application), Neon (database, [region]), Cloudflare R2 (encrypted backups and photos), Resend (sending emails), Sentry (error reports, without personal details), Have I Been Pwned (only the first 5 characters of a password's hash, to refuse leaked passwords).
Authorities, only when the law requires it.

4. How long we keep it

Business data: while the business uses the service; deleted [30] days after the owner asks; encrypted backups expire within [12 months].
Login sessions: end after 30 minutes without use, at most 12 hours. Technical records against repeated requests: 90 days.
Audit and security logs: [for as long as the business exists / period to be set].

5. Security

Encrypted connections (HTTPS), each business's data separated in the database itself, passwords hashed with Argon2id, optional two-step login, encrypted nightly backups, and regular security reviews.

6. Your rights

You can see and correct your account details, download a business's data (owner), ask for deletion, and withdraw consent. Customers of a business should contact that business first; we will help it answer. Write to [email]; we answer within [30] days. You may also complain to the Data Protection Board of India.

7. Data on tills

A registered till keeps a copy of item prices, recent bills and unsent bills on that computer so it can work without internet. Logging out removes everything except unsent bills; revoking a till removes everything.

8. Changes

We will announce important changes [30] days in advance.