Draft text. Have a lawyer review this page before you launch, then set LEGAL_DRAFT_BANNER to false in js/config.js.

Privacy

Your invoice data stays on your device

The tool runs in your browser. The CSV files you add, the check results and the JSON files are processed on your device. They are not uploaded to our servers or to any third party. You can confirm this by turning off your internet connection after the tool has opened; the checks still work.

Saved work on your computer

When your browser allows saving, the tool saves the invoice files you add, the cells you correct, your check history and the client names you type in your own browser (IndexedDB), on this computer only. This data is never sent to our servers or to anyone else. If saving is not available (for example in a private window), nothing is saved and your work is lost when you close the window.

• When it is deleted: saved data is deleted at the end of your current billing period. The deletion happens the next time you open any page of this website; expired data is never shown. When your plan is renewed with a new start date, data from the earlier period is treated as expired.
• Backup files: the Backup button creates a file on your computer. It is not encrypted and it is not deleted automatically. You are responsible for keeping it safe and for deleting it.
• Shared computers: when you log out, saved data is kept but hidden until you log in again with the same account. If you tick "This is a shared computer" on the login page, all saved data of your account is deleted from this computer when you log out.
• How to delete it yourself: use "Clear all saved data" on the Clients screen, "Clear this month" inside a client, or remove a GSTIN in My GSTINs (this also deletes its saved files and name). You can also clear your browser's site data.
• Your responsibility: we cannot recover saved data, because we never receive it. Use Backup if you need to keep a copy.

What we do collect

• Your email address and password (stored by our login provider as a secure hash, never readable by us), used to run your account.
• The date your account was created and the date your subscription ends.
• Payment details are handled by our payment provider. We receive confirmation of payment and the email used, not your card or bank details.
• Messages you send us, such as error reports. Please remove names and GSTINs from files you send.

GSTINs you add to your account

We store the GSTINs you add (the GSTINs of the businesses you file for) with the date each was added, so that we can apply your plan limit. We also store a random session code so that an account stays open on one computer at a time. Your invoice data is still never sent to us.

What is stored in your browser

Your login session and a few settings are kept in your browser's local storage, and saved work as described above in IndexedDB. Clear your browser data to remove them.

Who processes data for us

• Google Firebase (login and account records).
• Google Fonts (typefaces for this website).
• Razorpay (online payments).

Your choices

Write to to see, correct or delete your account data. We delete account records on request, except records we must keep for tax or legal reasons.

Changes

If this page changes in a way that matters, we will say so on the website.