Privacy Policy

This Privacy Policy explains how Bill Nikalo (“we”, “us”, “our”) collects, uses, stores, and protects personal data when you use the Bill Nikalo applications, websites, and related services (the “Service”). We process personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian laws.

1. Data We Collect

Data you provide

• Account data: name, business name, email address, phone number, and password.
• Business data: products, prices, invoices, orders, GST details, and customer records you enter into the Service.
• Support data: messages and attachments you send to our support team.

Data collected automatically

• Usage data: features used, app version, device type, operating system, and crash logs.
• Technical data: IP address, browser type, and approximate location derived from IP, used for security and analytics.

Payment data

Subscription payments are processed by our payment partner (Razorpay). We receive transaction confirmations and limited billing details (such as transaction ID and plan purchased) but do not store your card numbers, UPI PINs, or banking credentials.

2. How We Use Your Data

• To provide, operate, and maintain the Service, including billing, reports, and integrations;
• To process subscription payments and issue GST-compliant invoices;
• To provide customer support and respond to your requests;
• To send service-related communications (renewal reminders, security alerts, feature updates);
• To monitor, debug, and improve performance, reliability, and security;
• To comply with legal obligations, including tax and accounting requirements.

We do not sell your personal data to third parties.

3. Legal Basis (DPDP Act)

We process personal data on the basis of your consent (provided when you create an account and accept this Policy) and for legitimate uses permitted under the DPDP Act, such as processing necessary to provide the Service you have requested, comply with law, or respond to legal obligations. You may withdraw consent at any time by closing your account, subject to data we must retain by law.

4. Your Customers’ Data

When you store your customers’ details (such as names and phone numbers) in Bill Nikalo, you act as the data fiduciary for that data and we process it on your instructions as part of providing the Service. You are responsible for having a lawful basis to collect and use your customers’ data, including for WhatsApp messages sent through the Service.

5. Sharing & Disclosure

We share personal data only with:

• Service providers that help us run the Service (cloud hosting, payment processing, messaging, analytics, and crash reporting), bound by confidentiality and data protection obligations;
• Legal authorities when required by law, court order, or to protect our rights, users, or the public;
• Business transfers — in connection with a merger, acquisition, or asset sale, subject to this Policy.

6. Data Retention

We retain personal data for as long as your account is active and as needed to provide the Service. After account closure, we delete or anonymise personal data within a reasonable period, except where retention is required by law (for example, financial and tax records, which may be retained for up to 8 years under Indian law).

7. Security

We use reasonable technical and organisational safeguards to protect your data, including encryption in transit (HTTPS/TLS), encrypted storage of sensitive credentials, access controls, and monitoring. No system is completely secure; please use a strong password and keep your credentials confidential. In the event of a personal data breach affecting you, we will notify you and the Data Protection Board of India as required by the DPDP Act.

8. Your Rights

Under the DPDP Act, you have the right to:

• Access a summary of the personal data we process about you;
• Request correction or updating of inaccurate or incomplete data;
• Request erasure of your personal data, subject to legal retention requirements;
• Withdraw consent to processing;
• Nominate another individual to exercise your rights in case of death or incapacity;
• Raise a grievance with us and, if unresolved, approach the Data Protection Board of India.

To exercise any of these rights, email support@billnikalo.com. We will respond within the timelines prescribed by applicable law.

9. Cookies & Analytics

Our website uses essential cookies and privacy-respecting analytics to understand usage and improve the Service. You can control cookies through your browser settings; disabling essential cookies may affect site functionality.

10. Children’s Data

The Service is intended for business use by adults. We do not knowingly collect personal data from children under 18. If you believe a child has provided us personal data, contact us and we will delete it.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified via the app, email, or our website, and the “Last updated” date above will be revised.

12. Grievance Officer & Contact

For privacy questions, requests, or grievances, contact our grievance officer at support@billnikalo.com or via our Contact page.