This policy explains what data the Inventory & Billing web application (the "Service") collects, how it is used, and how it is protected.
Account data: when you sign in with Google we receive your name, email address and Google account identifier. These are used to create your account, route approval requests, and personalise the app.
Business data: everything you enter to run your shop — shops, products, stock, bills, payments, purchases, suppliers, petty expenses, attendance and day-register entries.
Customer & supplier records: names, phone numbers, ration card numbers and balances that you choose to store for billing, Udhaar Khata and reminders.
Data is used only to provide the Service: billing, inventory tracking, receipts, udhaar ledgers, reports, low-stock/expiry alerts, backup and restore. Customer phone numbers are used only when you choose to send a bill or reminder via WhatsApp or SMS links. We do not sell, rent or share your business data with third parties for marketing.
The Service is multi-tenant: each shop owner's data is strictly separated from every other shop. Staff you add (cashiers) can access only your shop's data; they can never see other shops or back up data to their own accounts.
Sensitive personal fields (phone numbers, ration card numbers, addresses) are encrypted at field level in the database; all traffic is served over HTTPS. Downloadable and nightly backups are encrypted, and restoring them requires your passphrase. Cloud backups are encrypted with your personal recovery key before they leave the server.
If a shop owner connects cloud backup, we store a refresh token (encrypted on our server) that lets the Service write backup files to the owner's own Drive/OneDrive. The restricted "drive.file" scope is used — the Service can only see files and folders it created itself. Backups are stored exclusively in the owner's cloud account, never in ours or anyone else's. Disconnecting cloud backup deletes the stored refresh token.
We do not use tracking cookies. The app stores a session token and offline data (cart, queued transactions, language/theme preferences) in your browser's local storage / IndexedDB purely so the app works offline and remembers your settings.
Business data is kept while your account is active. If your account is rejected, expired or closed, you may request deletion of your shop data; backups you downloaded or stored in your own cloud account remain under your control. Audit and backup records are retained for operational integrity.
You may export your data at any time from the Backups section, correct records in-app, and request access, correction or deletion of personal data by contacting the platform administrator through the app.
The Service is intended for business use by adults and is not directed at children under 18.
We may update this policy when features change; the date above reflects the latest revision. Material changes will be highlighted in the app.
Privacy questions: contact the platform administrator through the app's help option.