Overview
This policy explains how [Company Legal Name] ("BRICS Billing", "we", "us") handles personal data when you visit our website, create an account, or use our billing, invoicing and GST compliance platform and mobile apps (together, the "Service").
We process data in line with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023, as applicable. By using the Service you agree to this policy. If you do not agree, please do not use the Service.
Information we collect
Information you give us
- Account details: name, email address, mobile number, password (stored hashed), and your role in the business.
- Business details: business name, address, GSTIN, PAN, state, logo, bank details you choose to print on invoices, and invoice numbering preferences.
- Billing data you create: customers, suppliers, products, prices, HSN/SAC codes, tax rates, invoices, quotations, purchase records, payments, expenses and stock entries.
- Support messages: anything you send when you contact us, including attachments.
- Subscription payments: plan, billing history and payment status. Card, UPI and net-banking details are collected and processed by our payment partner. We do not store full card numbers.
Information collected automatically
- Device and log data: IP address, browser or app version, device type, operating system, language, pages or screens viewed, timestamps and crash reports.
- Usage data: features used, actions taken and error events, so we can find bugs and improve the product.
- Cookies and similar technologies: see the Cookies section.
Permissions on our mobile app
The app may ask for access to the camera (to scan barcodes or QR codes and attach photos), storage or files (to save and share invoice PDFs), contacts (only if you choose to import customers) and Bluetooth or nearby devices (only if you connect a receipt printer). You can refuse or withdraw any permission in your device settings; the related feature will stop working.
Information from third parties
If you verify a GSTIN or connect an e-invoicing or e-way bill service, we receive the registration and filing details returned by the relevant government or authorised provider.
How we use information
- To create and secure your account and provide the Service, including generating GST-compliant invoices, reports and returns data.
- To process subscription payments and send receipts, renewal notices and service messages.
- To sync your data across devices and keep backups.
- To provide support, respond to requests and fix problems.
- To monitor performance, prevent fraud and abuse, and keep the Service secure.
- To improve existing features and build new ones, using aggregated or de-identified data wherever possible.
- To send product updates and offers. You can opt out of marketing messages at any time; service and legal notices will still be sent.
- To meet legal, tax and regulatory obligations and to enforce our terms.
We do not sell your personal data or your business records.
Your data and our role
Invoices, customer lists and other business records you enter belong to you. For that data, you decide why and how it is processed and we act on your instructions to host and process it. You are responsible for having a lawful basis, and any required consent, to enter your customers' and suppliers' personal details (such as names, phone numbers and GSTINs) into the Service.
For account, usage and payment data about you as our user, we decide how the data is used and are responsible for it under this policy.
Security
- Data is encrypted in transit using TLS and passwords are stored using strong one-way hashing.
- Access to production systems is restricted, logged and limited to staff who need it.
- Regular backups and monitoring help us detect and recover from incidents.
- Role-based access lets you control what each team member can view or change.
No system is completely secure. Please use a strong, unique password, keep your devices updated and tell us immediately if you suspect unauthorised access. If a breach affecting your personal data occurs, we will notify you and the relevant authority as required by law.
Retention
We keep your data while your account is active. If you close your account, we delete or anonymise your personal data within a reasonable period, except where we must keep it longer.
Indian GST law requires registered businesses to maintain invoices and accounting records for several years after the relevant annual return. Because these records are yours, we recommend exporting them before closing your account. We may retain limited billing and transaction records about your subscription to meet our own tax, audit and legal obligations, and backups may persist for a short period before being overwritten.
Your rights
Subject to applicable law, you can:
- Access the personal data we hold about you and get a summary of how it is processed.
- Correct inaccurate or incomplete data. Most details can be edited directly in your account settings.
- Request erasure of your personal data when it is no longer needed for the purpose it was collected.
- Withdraw consent at any time. Withdrawal does not affect processing already done, and may limit what the Service can do for you.
- Export your invoices and reports in standard formats.
- Nominate another person to exercise your rights in the event of your death or incapacity.
- Lodge a grievance with us and, if unresolved, with the Data Protection Board of India once it is operational.
To exercise any right, write to us at the address in Contact and grievances. We may ask you to verify your identity first and will respond within a reasonable time.
Children
The Service is built for businesses and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.
Changes to this policy
We may update this policy as the Service or the law changes. When we make a material change we will update the date at the top of this page and notify you by email or in the app before it takes effect. Continued use of the Service after that date means you accept the updated policy.
Contact and grievances
For privacy questions, data requests or complaints, contact our Grievance Officer:
- Name: Arshad Ali
- Company:BRICS Billing
- Address: Kalaigaon , Assam, 784125 India
- Email: contact@bricsbilling.com
- Phone: +91 9101472116, Mon - Sat (9AM-8PM)
We acknowledge complaints within 48 hours and aim to resolve them within 15 days.