This policy explains what data BillMyItemscollects, how we use it, and the controls you have over it. We've tried to write it in plain English; if anything is unclear, email info@billmyitems.com.
What we collect
We collect only what we need to run the service:
- Account data: name, business name, email, phone, password (hashed with bcrypt), country, and the business type you pick at signup.
- Business data: products, parties (customers / suppliers), invoices, payments, stock movements, accounting entries, branches, users and any settings you configure inside the app. This is YOUR data; you own it.
- Technical data: IP address, browser, device type, pages visited, timestamps. Used for security, fraud detection, and aggregate analytics.
- Payment data: handled by Stripe / Razorpay / PayPal. We never see or store your full card number; we keep only the transaction id and amount.
How we use it
- To deliver the product (invoices, reports, sync between devices).
- To process subscription payments and send you receipts.
- To send transactional emails such as password resets, subscription renewal reminders, security alerts. We never use these channels for marketing.
- To send product updates and tips, only if you opt in. You can unsubscribe from any marketing email in one click.
- To detect and prevent abuse, fraud, and unauthorised access.
How we store it
Your business data is stored in a Postgres database, isolated per tenant using schema-level separation, so your data is never visible to another tenant. We encrypt data in transit (TLS 1.2+ everywhere) and at rest on disk (encrypted volumes).
Database backups run nightly and are retained for 30 days. Backups are encrypted with the same standards as the live database.
Sharing
We share data only with:
- Payment processors (Stripe, Razorpay, PayPal) to charge your subscription.
- Email delivery (transactional only): we use industry-standard providers like AWS SES / SendGrid.
- Analytics: Google Analytics on the marketing site only (not inside the app). You can opt out by enabling Do-Not-Track in your browser.
- Legal compliance: when required by a court order or applicable law. We will notify you unless legally forbidden from doing so.
We never sell your data. We never share it for advertising.
Your rights
- Access: request a copy of everything we hold about you.
- Export: download your business data as CSV / JSON at any time from inside the app.
- Correct: update inaccurate information.
- Delete: request account deletion. We will permanently delete all your business data within 30 days, except where retention is required by law (e.g. tax records).
To exercise any of these rights, email info@billmyitems.com. We respond within 7 business days.
Cookies
We use cookies to keep you signed in, remember your preferences, and measure aggregate marketing-site traffic. Essential cookies can't be disabled (you need them to log in). Analytics cookies can be blocked via your browser's privacy settings without affecting product functionality.
Children
BillMyItemsis built for businesses, not children. We don't knowingly collect data from anyone under 16. If you believe we have, email us and we'll delete it.
Changes to this policy
We may update this policy as the product evolves. Material changes are emailed to account owners at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the most recent revision.
Contact
Questions, requests, or complaints, email info@billmyitems.com.
Last-resort escalation
If we can't resolve a privacy concern to your satisfaction, you have the right to complain to your local data protection authority (e.g. the Data Protection Board of India under the DPDP Act 2023).
