Privacy Policy

This policy explains how Beyond Basics ("we", "us"), based in Bengaluru, Karnataka, India, handles personal data when you use the PaisaBill apps for Android and Windows, the web app at app.paisabill.in (together, the "App") and this website, www.paisabill.in (the "Website"). It is written to meet the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 and rules made under it.

Summary

We store your account, shop and billing data so the App works across your devices.
Data is stored with Google Firebase (Google Cloud).
We do not sell your data. There are no ads and no advertising trackers in the App.
The App has no analytics or crash-reporting SDK. The Website uses cookieless Vercel Web Analytics.
You can ask us to delete your account and data at any time. See Delete your account.

1. Data we collect

Account data

When you sign up we collect your name and email address, and a password if you use email sign-in. Passwords are handled by Firebase Authentication; we never see them. If you sign in with Google (on Android and the web), we receive your name, email address and profile photo URL from Google. You may also add a phone number to your profile. We remember the last shop you opened.

Shop data you enter

When you set up and use a shop, the App stores what you enter, including:

Shop profile: shop name, legal name, address, phone, GSTIN, FSSAI and CIN numbers, UPI ID and payee name, tax and billing settings and bill template choices.
Catalogue: products, categories, prices, MRP, GST rates, HSN codes, barcodes, stock levels, offers and tables.
Bills: items, quantities, amounts, taxes, discounts, payment modes, the staff member who created the bill, and any cancellation reason.
Reports data: daily sales totals calculated from your bills.
Team: names, email addresses, profile photo URLs, roles and permissions of people who join your shop, and pending invitations and join codes.
Device records: a random device identifier and bill-number counters used to keep bill numbers unique across devices.

Your customers' data

If you add a customer to a bill or to your customer list, the App stores the details you enter: name, phone number, and optionally email, GSTIN and address or notes, along with their visit count, total spend and bill history at your shop. For this data, you (the shop) decide what is collected and why, and we process it on your behalf to provide the App. Please collect customer details only with their knowledge and for your billing needs.

Data we do not collect

We do not collect your location. See "Device permissions" below.
We do not collect payment card or bank details. UPI payments happen in your customer's UPI app, not in PaisaBill.
We do not access your contacts, photos or files, except a file you choose yourself to import (such as a product CSV).

2. Device permissions

Bluetooth / Nearby devices: to find and connect to Bluetooth receipt printers.
Location (Android 11 and older only): these Android versions require location permission to scan for Bluetooth devices. The permission is used only for Bluetooth scanning. PaisaBill does not read, store or send your location. On Android 12 and newer, Bluetooth scanning is declared as not used for location and no location permission is requested.
USB: to print to a USB printer connected to your Android device.
Local network: to find and print to Wi-Fi or LAN printers on your network.
Camera: to scan product barcodes. Camera images are processed on the device and are not saved or uploaded.
Internet: to sign in and sync your data.

Printer details (such as a printer's name and address) are saved on your device so it can reconnect.

3. How we use data

To provide the App: sign-in, billing, printing, reports and syncing between your devices and team members.
To keep the App secure and prevent misuse, for example enforcing access rules so only your shop's members can see its data.
To respond to support requests. When you email us from the App, the email includes the App version and platform to help us diagnose problems.
To comply with legal obligations.

We do not use your data for advertising, and we do not build marketing profiles.

4. Where data is stored

The App uses Google Firebase: Firebase Authentication for sign-in and Cloud Firestore for your data, operated by Google on Google Cloud infrastructure. Google processes this data for us under its Firebase terms and data processing terms. Data may be stored or processed on servers outside India, as permitted under the DPDP Act. Data is encrypted in transit and at rest by Google.

The App also keeps a copy of your data on your device so you can bill offline. This copy syncs with Cloud Firestore when you are online. Signing out does not erase every cached record from the device immediately; uninstalling the App or clearing its data does.

5. Website analytics

The Website (not the App) uses Vercel Web Analytics and Vercel Speed Insights to count page views and measure page speed. They do not use cookies and do not identify individual visitors. The Website and web app are hosted on Vercel, whose servers process standard request data such as IP address and browser type to deliver pages.

The App does not include Firebase Analytics, Crashlytics, advertising SDKs or other third-party trackers.

6. Sharing

We do not sell or rent personal data. We share data only:

With members of your shop, according to the roles and permissions the shop owner sets.
With our service providers, Google (Firebase) and Vercel, to run the App and Website.
When you choose to share, for example sending a PDF invoice through another app on your device.
When required by law, court order or a government authority with legal power to ask.

7. Retention and deletion

We keep your data while your account is active. Paid bills are not deleted inside the App, so your sales history stays complete. Shop owners can delete a shop from the App, which removes that shop's catalogue, customers and other shop data.

You can ask us to delete your account. We will delete your account and the personal data linked to it, including shops you own, within 30 days of verifying the request. Small residual copies may remain in Google's backups for a limited period before being overwritten. We may keep information we are legally required to keep. Instructions are on the Delete your account page.

Indian tax law may require your business to keep billing records for several years. Please export your reports (CSV or PDF) before asking for deletion.

8. Your rights under the DPDP Act

You have the right to:

Get a summary of your personal data we process and who we have shared it with.
Correct, complete or update your data. Most of it can be edited directly in the App.
Have your data erased, as described above.
Withdraw consent, by stopping use of the App and requesting deletion.
Nominate another person to exercise these rights if you die or become unable to.
Raise a grievance with us, and if not resolved, complain to the Data Protection Board of India.

To use any of these rights, email beyondbasicstech@gmail.com from your registered email address.

9. Children

PaisaBill is a business tool and is not directed to anyone under 18. We do not knowingly collect personal data of children. If you believe a child has created an account, contact us and we will delete it.

10. Security

Access to shop data is controlled by server-side security rules so that only signed-in members of a shop can read it, and permissions limit what each member can do. No system is completely secure, so please use a strong password and remove staff who leave your shop.

11. Changes to this policy

We will post any changes on this page and update the effective date. If a change is significant, we will also tell you in the App or by email.

12. Grievance officer and contact

Grievance Officer, Beyond Basics
Bengaluru, Karnataka, India
Email: beyondbasicstech@gmail.com

We aim to acknowledge grievances within 72 hours and resolve them within 30 days.