Privacy Policy

• Account details — your name, email address and sign-in information, handled through our authentication provider.
• Business details — business name, GSTIN, PAN, addresses, phone, email, invoice settings and the bank details you choose to print on invoices.
• Records you create — customers, vendors, products, invoices, purchase bills, payments, e-invoices and E-Way Bills, including the details of your customers and vendors that you enter.
• GST credentials — if you connect your own GST API account, the credentials are stored encrypted.
• Activity records — an audit trail of sensitive actions (who did what, when, and from which IP address) and a log of requests sent to the GST system, with passwords and tokens removed.
• Cookies and local storage — used to keep you signed in and to remember preferences such as the colour theme and whether the sidebar is collapsed. We do not use advertising cookies.

• To provide the service: creating invoices, calculating GST, and generating e-invoices and E-Way Bills.
• To verify GSTINs and fetch registered business details when you ask us to.
• To keep your account secure, enforce the roles you assign, and investigate problems.
• To contact you about your account and the service.

We do not sell your personal data, and we do not use your business records for advertising.

We share information only with the service providers that run Cliqpay for us, and only what each needs:

• Masters India (licensed GST API provider) — invoice and transport details needed to register e-invoices, generate E-Way Bills and look up GSTINs, which they pass to the government GST systems.
• Clerk — sign-in and account management.
• Neon and Vercel — database and application hosting.
• OpenRouter — only if you use the AI assistant: your question, your business name and state, this month's summary figures and the names and totals of your top customers are sent to generate the answer.

We may also disclose information where the law requires it.

Your data is stored with our hosting providers, whose servers may be located outside India, including in the United States. We choose providers that protect data with industry-standard security.

We keep your records for as long as your account is active and afterwards for as long as needed to meet legal, tax and accounting obligations. Invoices and GST documents may need to be retained for the periods the GST law prescribes.

Access is protected by sign-in and role-based permissions, stored GST credentials are encrypted, secrets are removed from logs, and sensitive actions are recorded in an audit trail. No system is perfectly secure, so please keep your sign-in details safe and tell us straight away if you suspect misuse.

You can ask to access, correct or erase your personal data, withdraw consent, and nominate someone to exercise these rights for you. Most business details can be corrected directly in Settings. For anything else, contact us at the contact details published on this website.

If you have a concern about how your data is handled, write to our grievance officer at the contact details published on this website. See our Grievance Redressal page for how complaints are handled and how long they take.

We may update this policy as the service changes. The date at the top shows when it was last revised; significant changes will be communicated to account holders.