Privacy Policy

1. Introduction & Scope

Welcome to the Privacy Policy of IndSoftWork Technology ("Company", "we", "us", "our"). BillKitna is an offline billing application developed, owned, and operated by IndSoftWork Technology. We are committed to protecting the privacy, database configurations, and personal credentials of our merchants ("Users", "you", "your") who access our landing website (https://billkitna.in) and utilize the BillKitna Mobile POS Android application services.

This document outlines how we collect, store, encrypt, process, and protect your information under the rules formulated in the Indian Information Technology Act, 2000 (including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011) and modern global data frameworks.

2. What Information We Collect

To supply a highly performant, fully compliant offline billing system, we capture variables across two main categories:

• Account Profile Information: When you register a trial, subscribe to a premium plan, or fill out a form, we capture your full name, registered business email, physical store address, WhatsApp mobile number, business category (e.g. Kirana, Pharma), and optional GSTIN/tax identifier.
• Operational POS Metadata: To enable real-time local device execution, our Android app creates an encrypted SQLite database on your local disk. This database holds your product inventory lists, customer credit ledgers (Khata), expense tracking variables, and supplier contact lists. When you activate cloud synchronization backups, these lists are securely synchronized to our central databases using end-to-end TLS encryption.
• Hardware Permissions: To scan barcode numbers seamlessly, our application requests standard system permission to access your mobile Camera utility. No video or image is ever uploaded to our servers; camera feeds are processed entirely on-device to decode alphanumeric barcodes in real-time.

3. How We Use Your Information

The captured variables are utilized strictly for core operational performance, including:

• Authorizing account logins and preventing fraud across multiple synced devices.
• Enabling secure cloud database backup protocols to prevent data loss due to device physical damage.
• Delivering automated invoices, receipts, and subscription notices via email or WhatsApp.
• Processing subscription billing safely through our registered payment aggregator partner, Razorpay Software Private Limited.
• Improving local database query efficiency and camera barcode detection algorithms.

4. Data Security & Encryption

We implement highest industry-grade reasonable security practices (including compliance with ISO 27001 standards).

All remote server interactions occur over Secure Socket Layer (SSL) / Transport Layer Security (TLS) connections. In-app data caches utilize AES-256 local database file encryption to guard against unauthorized access on-device.

5. Third-Party Disclosures & Payment Partners

We strictly enforce a **zero-selling policy** — we do not lease, distribute, or sell your customer list or inventory database to marketing agencies or third parties.

Data is shared only with secure service providers essential for service continuity:

• Razorpay: Subscription card/UPI processing values are handled entirely inside Razorpay's secure SDK interfaces. We do not store credit card credentials or bank passwords.
• Brevo SMTP: Used for automated system transactional emails (such as invoices and credentials reset instructions).

6. Account Deletion & Data Rights

You hold absolute rights to inspect, update, correct, or request deletion of your entire profile data. If you decide to close your store and wish to purge all synced product categories, customer records, and tax filings from our cloud server databases, you can click "Request Account Deletion" in the App Settings panel or write a request directly to support@billkitna.in. Upon verification, your database records are purged within 7 business days.

7. Grievance Officer Contact

In compliance with the Information Technology Act 2000 and rules made thereunder, the name and contact details of our Grievance Officer are provided below: