Privacy Policy

This policy explains what Kedaya Tech LLP ("we") collects when you use InvoiceSeth, why, where it is kept and how you control it. It applies to invoiceseth.com, the InvoiceSeth Android and iOS apps and our support channels.

1. What we collect

• Account details: your name, email address, mobile number, password hash, and, if you sign in with Google or Apple, the identifier and email they share with us.
• Business data you enter: organizations, GSTINs, addresses, bank details, logos and signatures, customers and vendors, items, documents, payments and notes.
• Usage and device data: IP address, browser or app version, pages and actions, kept in server logs for security and troubleshooting.
• Billing data: plan, subscription invoices and payment references. Card and UPI details are entered on the payment gateway's pages and never reach our servers.
• Messages you send us through the contact form, email, phone or WhatsApp.

2. How we use it

• To run the Service: generating PDFs, computing GST, sending documents by email and WhatsApp, recording payments and showing your dashboard.
• To sign you in and keep your account secure, including OTP codes by email and WhatsApp.
• To bill you and issue GST invoices for your subscription.
• To answer support requests and to tell you about changes to the Service, prices or these terms.
• We do not sell personal data, show advertising, use your business data to train models, or share one customer's data with another.

3. Who else sees it

Only the processors needed to deliver a feature, each bound by its own data-protection terms, and each receiving only what that feature needs:

• Payment gateways (Razorpay, Cashfree) for subscription payments.
• The WhatsApp Business API provider for OTP codes and invoice notifications you choose to send.
• Email delivery providers for OTP codes and invoices you choose to email.
• Google and Apple, only if you choose to sign in with them.
• Our hosting provider in India, where the servers and backups run.

We disclose data to authorities only when required by Indian law, and we tell you when we are allowed to.

4. Where it is stored and how it is protected

• Data is stored on servers located in India.
• Connections use TLS. Passwords are stored as salted hashes; sensitive fields are encrypted at rest.
• Public document links use long random identifiers and can be disabled by cancelling the document.
• Internal access is limited to staff who need it for support, and is logged.

5. Retention and deletion

• Your business data is kept while your account is active.
• When an account is closed, data stays exportable for 30 days and is then permanently deleted from live systems; backups expire within a further 30 days.
• Subscription invoices we issued to you are retained for the period required by GST law.
• Server logs are kept for 90 days.

6. Your rights

You can see and edit your account and business data inside the app at any time, and export it from account settings. You may also ask us to correct, export or erase your personal data, or to close your account, by writing from your registered email to [email protected]. We answer within 7 working days. These rights follow India's Digital Personal Data Protection Act, 2023; if you are in a jurisdiction with additional rights, such as the GDPR, we honour those too.

If your customers' details appear in your invoices, you are the data fiduciary for them and we process that data on your instructions.

7. Cookies

invoiceseth.com uses only the cookies needed to keep you signed in and to protect forms against misuse. There are no advertising or cross-site tracking cookies, so there is no cookie banner.

8. Children

The Service is for businesses and is not directed at anyone under 18.

9. Changes and contact

We will announce material changes to this policy by email and in the app before they take effect. Questions about privacy: [email protected], or Kedaya Tech LLP, 302 Jyoti Complex, Mavdi Main Road, Rajkot, Gujarat 360004, India.