Privacy Policy

InDhan PayGate Private Limited ("we", "us", "InDhan PayGate") operates InDhanPay Books (the "Service"). This policy describes what personal data we collect, why, how we use it, and your rights — written for compliance with the Information Technology Rules 2011 and India's Digital Personal Data Protection Act, 2023 (DPDP).

1. Data we collect

• Account data: name, email, phone, business name, GSTIN, PAN, address (provided during signup or settings).
• Business data: invoices, clients, products, payment records, and related transactional content you create.
• Payment data: our RBI-authorised payment gateway partner handles your card / UPI details. We store only the resulting transaction reference; we do not store card numbers.
• Usage data: IP address, browser, device, login times, audit-log entries for security.

2. How we use it

• To deliver, maintain, and improve the Service.
• To process your subscription payments and issue GST-compliant tax invoices.
• To send transactional communications: invoice shares, payment receipts, renewal reminders, security alerts.
• To meet legal obligations under Indian GST, IT, and tax laws.

3. Data sharing

We share data only with the service providers that help us run the Service (our payment gateway partner for payment processing, our transactional email and messaging providers, and our cloud hosting and storage provider), each bound to use it only for that purpose, and with Indian tax authorities when legally required. We never sell your data.

4. Data location

All data is stored on cloud servers located in Mumbai, India. We do not transfer your data outside India.

5. Retention

Active accounts: data is retained while your account is active. After cancellation, data is retained for 7 years to comply with India's GST record-keeping requirements (Rule 56 of CGST Rules), then permanently deleted.

6. Your rights (DPDP Act)

• Access and copy your data
• Correct inaccurate data
• Request erasure (subject to GST retention requirements)
• Withdraw consent for marketing
• File a complaint with the Data Protection Board of India

To exercise these rights, email support@indhanpay.com.

7. Security

We use TLS 1.2+ for all traffic, bcrypt for passwords, JWT with short expiry, AES-256-GCM for sensitive credentials at rest, and regular backups with encrypted storage. Notwithstanding these safeguards, no system is fully secure; you accept residual risk by using the Service.

8. Cookies

We use functional cookies (session, CSRF, preferences) only. We do not use third-party tracking cookies for advertising.

9. Changes

We may update this policy occasionally. The "Last updated" date at top reflects the most recent change. Continued use of the Service constitutes acceptance.

10. Contact