Privacy Policy

HSR Billbook (“we”, “us”) operates HSR Billbook, a billing, inventory and GST compliance application for businesses in India. For data you enter about your own customers and suppliers, you are the data fiduciary and we act as a data processor on your instructions.

Questions about this policy or about your data go to support@hsrbillbook.com.

• Account details — your name, email address, phone number and, if you upload one, a profile picture.
• Business details — business name, PAN, GSTIN, addresses, branch details, bank and UPI details you choose to print on documents, and your logo and signature images.
• Business records you create — invoices, quotations, credit notes, delivery challans, purchase orders, goods receipts, purchase bills, payments, items, stock movements, and the customer and supplier records these refer to.
• Payment records — the plan you chose, amounts, and the identifiers our payment gateway returns. We never receive or store your card number, CVV, UPI PIN or net-banking credentials.
• Technical data — authentication tokens, device and browser information, and error logs needed to keep the service running and secure.

• To provide the service — to create, number, tax, store and render your documents.
• To authenticate you and enforce the permissions your business has configured.
• To generate your GST registers and reports from records you have entered.
• To take subscription payments and issue you a tax invoice for them.
• To send service messages such as trial and renewal reminders and security notices.
• To diagnose faults, prevent abuse, and meet our own legal and tax obligations.

We do not sell your data, and we do not use the contents of your business records to build advertising profiles.

Only with the providers needed to run the service, and only to the extent needed:

• Google Firebase (Google Cloud) — authentication, database, file storage, serverless functions and hosting.
• Razorpay — subscription payments. Card and banking details are collected directly by Razorpay on their own systems.
• Your GSP or IRP provider — only where you have connected credentials and only when you submit an e-invoice or e-way bill, and only the fields that submission requires.
• Authorities — where we are legally compelled to disclose, and where we may lawfully do so, after telling you.

Data is held on Google Cloud infrastructure. Depending on the region a service runs in, data may be processed outside India; where it is, we rely on the provider’s contractual safeguards for that transfer.

• Traffic is encrypted in transit with TLS; stored data is encrypted at rest by our provider.
• Access is scoped by database security rules and re-checked on the server for every action.
• GSP and IRP credentials are stored so that no client application — including your own browser — can read them back.
• We do not hold card data at any point.

No system is perfectly secure. If a breach affects your data we will notify you and the relevant authority as the law requires.

Your records are kept for as long as your account is active. Indian tax law requires businesses to preserve books and records for several years, so we retain your business records for the applicable statutory period even after a subscription lapses, unless you ask us to delete them earlier and we are free to do so.

Deleting a business from within the app removes its records from the live service. Backups age out on their own cycle.

Subject to law and to our own retention obligations, you may ask us to:

• give you a copy of the personal data we hold about you;
• correct anything inaccurate — most fields you can edit yourself in the app;
• delete your account and its data;
• stop sending you non-essential email;
• explain how a particular piece of processing works.

Write to support@hsrbillbook.com. We will respond within the period the applicable law allows.

We use cookies and browser storage for the things the app cannot work without — keeping you signed in, remembering which business and branch you last used, and caching your data on the device so the app stays usable on a poor connection. We do not use third-party advertising or cross-site tracking cookies.

The service is for businesses and is not directed at anyone under 18. We do not knowingly collect data from children.

If we change this policy we will update the date at the top, and for anything material we will tell you in the app or by email before it takes effect.

HSR Billbook
Registered office address, City, State 000000, India
support@hsrbillbook.com