Privacy Policy
Last updated: June 2025
Open in BillYantra App🔒 Your privacy matters to us. We collect only what's necessary, never sell your data, and protect everything with industry-standard security.
1. Who We Are
BillYantra is a product of Webshilp E Commerce IT Solutions (GSTIN: 07DCRPK6635R1ZJ), a GST accounting software for Indian businesses. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at billyantra.com. For questions, contact us at privacy@billyantra.com.
BillYantra is a private, independent product and is not affiliated with, endorsed by, or associated with the Government of India, GSTN, CBIC, or any government body. GST rates, HSN/SAC codes, and return formats are provided for reference only; the official sources are gst.gov.in and cbic-gst.gov.in.
2. Information We Collect
2.1 Information you provide directly:
- Account information: name, email address, password (stored hashed)
- Company details: business name, GSTIN, address, state code, logo
- Team member details: if a company administrator adds you as a team member, that administrator provides your name and email so we can create your account and give you access to that company. You will receive an email to set your password.
- Financial records: invoices, purchase bills, customer/vendor details, product catalog, vouchers
- Payment information: billing details for paid subscriptions (processed by our payment gateway — we never store card numbers)
2.2 Information collected automatically:
- Log data: IP address, browser type, pages visited, time and date of visits
- Device information: device type, operating system
- Cookies: session cookies for authentication and preference cookies (see Section 7)
2.3 Android app — additional data practices:
- Device fingerprint: At registration we compute a one-way hash of your device model, brand, and Android version. This hash is used solely as a soft anti-abuse signal to detect bulk fake-account creation. It is never used to track you after sign-up and cannot be reversed to identify your device.
- Google Sign-In: If you register via Google, we receive your name, email address, and Google profile photo. We do not receive your Google password at any point.
- Authentication tokens: Sanctum API tokens are stored on your device using Android's encrypted storage. They are never written to unprotected external storage.
- Network security: All communication between the app and our servers uses HTTPS (TLS 1.2+). Cleartext HTTP connections are blocked at the app level.
- AI features: When you use AI-powered features (HSN code lookup, GSTR pre-check, payment reminder generation, purchase bill scan), relevant invoice text is sent to our AI provider to generate a response. This content is not stored by the AI provider beyond the duration of the request and is not used to train models.
- Camera / storage permissions: The app requests camera and file-storage access only when you use the purchase bill scan feature. Images are processed locally and/or sent to our server for OCR; they are deleted from our server immediately after processing.
3. How We Use Your Information
- To provide and operate the BillYantra service
- To authenticate your account and maintain session security
- To process subscription payments and send receipts
- To send service-related emails (account confirmation, password reset, billing)
- To respond to your support requests
- To improve the service based on aggregate, anonymized usage patterns
- To send product updates and announcements (you can opt out at any time)
- To comply with applicable laws and regulations
We do NOT use your financial data (invoices, purchases, customer details) for any purpose other than providing the service to you.
4. Data Sharing & Disclosure
We do not sell, rent, or trade your personal or financial data. We may share limited data only in these situations:
- Service providers: We use trusted third-party services (cloud hosting, email delivery, payment processing) that process data on our behalf under strict confidentiality agreements.
- Legal requirements: We may disclose information if required by law, court order, or government authority.
- Business transfers: In the event of a merger or acquisition, your data may be transferred — we will notify you in advance.
5. Data Security
- All data is transmitted over HTTPS with TLS encryption
- Passwords are hashed using bcrypt — we cannot see your password
- Financial data is stored in encrypted databases with access controls
- Regular security audits and vulnerability assessments
- Access to production data is restricted to authorized engineers only
No method of transmission over the internet is 100% secure. While we use best practices, we cannot guarantee absolute security.
6. Data Retention
- Your data is retained for as long as your account is active.
- After account deletion, data is retained for 30 days so you can export it, then permanently deleted.
- Certain transaction logs may be retained for up to 7 years as required by Indian tax law (GST Act requirements).
- Backup data is automatically purged after 90 days.
7. Cookies
We use the following types of cookies:
- Essential cookies: Required for authentication and security. Cannot be disabled.
- Preference cookies: Store your UI preferences (e.g., language, settings). Can be cleared via browser settings.
- Analytics cookies: Anonymous usage statistics to help us improve the product. You can opt out.
We do not use advertising or third-party tracking cookies.
8. Your Rights (Indian IT Act & DPDP Act 2023)
Under the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023, you have the following rights regarding your data:
- Access: Request a copy of all data we hold about you.
- Correction: Update or correct inaccurate data through your account settings.
- Deletion: Request deletion of your account and all associated data.
- Export: Download your data (invoices, customers, products) in standard formats.
- Opt-out: Unsubscribe from marketing emails at any time via the unsubscribe link.
To exercise any of these rights, contact us or email privacy@billyantra.com.
9. Children's Privacy
BillYantra is intended for business use by adults. We do not knowingly collect data from individuals under 18 years of age.
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you by email and via an in-app notice at least 14 days before material changes take effect. The date at the top of this page indicates the last revision.
11. Contact Us
For privacy-related questions, requests, or complaints:
Email: privacy@billyantra.com
Or use our Contact page.