Privacy Policy

BillGenerator ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This policy explains what we collect, why, and the rights you have under India's Digital Personal Data Protection Act 2023 ("DPDP Act").

1. Who we are

BillGenerator is a free web and mobile tool for generating Indian bill and invoice formats, including GST invoices, rent receipts, fuel bills and related documents. For privacy inquiries contact support@billgenerator.ai.

2. What we collect

• Account data, email address (for signup and magic-link login), optional display name.
• Bill data, the content you enter into a generator (business name, GSTIN, line items, etc.) only when you sign up and choose to save a bill. Anonymous users' form data stays in their browser.
• Payment data, we do not store card or UPI details. Payments are processed by Dodo Payments. We receive a payment ID and status.
• Usage data, page views, device type, approximate location (country/state), aggregated via privacy-respecting analytics. We do not fingerprint individual users.

3. Why we collect it (lawful basis)

Under the DPDP Act, consent is the primary lawful basis for processing personal data in India. When you sign up, log in, save a bill, or purchase credits, you consent to the specific use of your data for that purpose. We do not use pre-checked boxes or bundle consent with our Terms of Service.

We process data to: run the service, deliver the PDFs you request, bill you for Lifetime Access, prevent abuse, and comply with Indian tax and record-keeping law.

4. Who we share it with

• Supabase, our backend database and authentication provider. Data is hosted in Supabase's designated region.
• Dodo Payments, processes your payments. Their privacy policy governs how they handle card/UPI data.
• Email delivery, transactional emails (magic links, receipts) are sent via our email provider.

We never sell your data. We never share it for advertising.

5. Your rights under the DPDP Act

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data, or complete incomplete data.
• Erase your personal data (delete your account).
• Withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing.
• Grievance redressal, contact us first at support@billgenerator.ai. If we do not resolve your complaint within 30 days, you may escalate to the Data Protection Board of India.
• Nominate a representative to exercise your rights in case of death or incapacity.

6. Children's data

BillGenerator is intended for adult users. We do not knowingly collect data from anyone under 18. If we learn we have done so, we will delete that data.

7. Retention

Account data is retained for as long as your account is active. Saved bills are retained until you delete them. Payment records are retained for 8 years to satisfy Indian tax audit requirements. Anonymous session data is deleted within 30 days of inactivity.

8. Security

We use industry-standard measures including TLS encryption in transit, encrypted storage at rest, role-based access control on the backend, and regular dependency audits. No system is perfectly secure; we will notify affected users of any data breach in line with DPDP rules.

9. Changes to this policy

We may update this policy. The "last updated" date above shows when. Material changes will be notified by email to registered users.

10. Contact

Grievance officer: support@billgenerator.ai.