1. What We Collect

Account data — name, email address, phone number, company name, hashed password.
Verification data — one-time codes sent to your email or WhatsApp to confirm your contact details.
Licensing data — your licence, plan, payment records, registered devices and a hardware fingerprint of the licensed computer. The fingerprint is built from hashed hardware identifiers (we store only one-way hashes, never raw serial numbers) and is used solely to bind your licence to your computer and prevent licence misuse.
Business data you sync — invoices, products, parties and related records, when you enable cloud sync. Billman works offline; syncing is your choice.
Support data — messages you send through the in-app help form, callback requests or the website contact form.

2. How We Use It

To provide, license and support the software
To process payments (through Razorpay; we never see or store your card/UPI credentials)
To send transactional messages: verification links and OTPs, payment receipts, licence and renewal notices
To prevent fraud and enforce licence terms

We do not sell your data, and we do not use your business data for advertising.

3. Where Data Lives

Synced data is stored on servers located in India. Local data lives in the Billman database on your own computer and remains there even if your subscription lapses.

4. Payment Processing

Online payments are processed by Razorpay. Your payment instrument details are handled entirely by the payment gateway under their privacy policy; we receive only the payment confirmation, amount and reference IDs.

5. Retention

Account and licensing records are kept while your account exists and as required for tax/accounting law.
Synced business data is kept while cloud sync is active. If your licence is revoked or transferred away from a device, that device's sync stops, but previously synced data remains in your tenant until you delete it.
Support messages are kept for service-quality purposes.

6. Your Rights

You can export your data from the app at any time. You may request correction or deletion of your account data by writing to [email protected]. Deleting your cloud account does not delete the local data on your computers.

7. Security

Data in transit is encrypted (HTTPS). Cloud credentials on your desktop are stored encrypted. Passwords are stored as bcrypt hashes. Access to production systems is restricted and audited.

8. Changes

We may update this policy; material changes will be announced in the app or by email.

9. Contact

Privacy questions: [email protected].

Privacy Policy