AiGST — Privacy Policy
AiGST is an invoicing and GST billing app for businesses in India, provided by AiTechies ("we", "us"). This policy says what the app collects, why, who else handles it on our behalf, and how you can have it deleted. Questions go to [email protected].
What we collect
Your account. Your email address and your name. Your password is handled by our sign-in provider and stored only in hashed form; we never see it.
Your business profile. What you enter under Settings → Company: business and legal name, GSTIN, PAN, address and state, phone, email and website, your bank account details (account name, number, IFSC and branch), your UPI id, your invoice design and your invoice preferences. This information is printed on the invoices you create.
Your clients. For each client you add: name and legal name, phone numbers, email address, address, GSTIN, PAN and any notes you write. If you pick a client from your phone's address book, only the one contact you choose is read, and only its name and phone numbers are copied into the form. The app never reads or uploads your address book.
Your business records. The products and services you sell, stock movements, invoices, quotations, proforma invoices and credit notes with their line items, payments you record, advances and receipt vouchers, expenses, recurring invoice schedules and the message templates you write.
Images and documents.
- Logo and signature images you upload. They are stored so that they can appear on the invoices you send, and are therefore readable by anyone who has the exact link to the image.
- Receipt photos you attach to expenses, and invoice PDFs the app generates. These are stored privately and can be opened only by your account, unless you share them yourself.
- Images from your photo library are uploaded only when you pick one as a logo, a signature or a receipt. The app does not otherwise access your photos, and it does not use the camera.
Notifications. If you allow notifications, the app registers your device with Google Firebase Cloud Messaging and sends us the resulting push token, together with the device platform (Android or iOS), its model name, the app version and when the app was last opened. We use these only to deliver notifications to your account. Payment reminders that the app schedules on your phone stay on the phone.
GST register lookups (optional). When you ask the app to look up a GSTIN, our server sends that GSTIN, and nothing else about you, to a third-party GST data provider (Appyflow), and returns the details published on the GST register, such as the registered name, address and registration status. These results are public register data. We keep them for up to 30 days so that the next lookup of the same GSTIN, by anyone, does not cost another request, and we do not record who asked for them. To enforce a fair-use limit we count how many lookups each account makes per day, but not which GSTINs. If you add your own lookup key for that provider, it is encrypted before it is stored, can never be read back by anyone, and is used only for your own lookups.
Your subscription. Your trial dates, your plan, the payments you make to AiTechies as we record them, and whether your account is locked. Our staff may keep internal notes about your account for support and billing.
App lock. If you turn on the app lock, Face ID, Touch ID or your fingerprint is checked by your phone's operating system. The app only learns whether the check passed; no biometric data is ever sent to us.
What we do not collect
The app has no advertising and no third-party analytics or tracking tools. It does not access your location, your camera or your address book as a whole. We do not sell your information or share it for anyone else's marketing.
How we use it
- To run the app for you: storing your records, numbering and producing invoices and PDFs, and syncing them across your devices.
- To send you notifications you have allowed, such as payment reminders and repeat-invoice alerts.
- To look up GST registrations when you ask for it.
- To manage your trial and subscription, and to answer you when you contact support.
- To keep the service secure and working, and to meet our legal obligations.
Who processes it for us
We use the following service providers, each only for the purpose listed:
- Supabase hosts the database, sign-in, file storage and the server functions the app calls. Everything you enter in the app is stored here. Supabase privacy policy
- Google Firebase Cloud Messaging delivers push notifications to your device, using the push token described above. Google privacy policy
- Appyflow receives only the GSTINs you look up. appyflow.in
Some of these providers may store or process data on servers outside India. Apple and Google also handle the download of the app under their own privacy policies. We disclose information to anyone else only where the law requires us to.
How long we keep it, and how to delete it
We keep your information for as long as your account exists. An account whose trial or plan has ended becomes read-only, but its data is not deleted for non-payment.
You can delete your account at any time from inside the app: Settings → Delete account. This permanently erases your account and everything in it: your business profile, clients, products, invoices, payments, advances, expenses, uploaded images, invoice PDFs, registered devices, any lookup key and your subscription records. It cannot be undone. Copies may remain in our hosting provider's routine backups for a short period until those backups expire. GST register results cached from your lookups are public register data not linked to you, and remain in the shared cache until they expire.
If you cannot use the app, write to [email protected] from the email address on your account and we will delete it for you. Our staff can also lock an account, which makes it read-only, or delete it at your request. How to delete your account has the steps.
Security
Data travels between the app and our servers over encrypted connections. Each account's records are separated in the database so that one account cannot read another's. The app keeps a copy of your records on your phone so that it works offline; the app lock protects that copy if you turn it on. No system is perfectly secure, but we work to protect your information and will tell you without undue delay if a breach affects it.
Your rights
You can see and correct almost everything we hold directly in the app, and delete all of it as described above. Under the laws that apply to you, including India's Digital Personal Data Protection Act, 2023, you may also ask us for a summary of the personal data we process about you, ask us to correct or erase it, or raise a grievance. Write to [email protected]; we will respond within a reasonable time and in any case within the time the law requires.
Children
The app is a business tool and is not directed at anyone under 18. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will delete it.
Changes to this policy
When we change this policy we update the effective date above, and if the change is significant we will tell you in the app before it takes effect.
Contact
This policy is governed by the laws of India. For any question or request about your data, contact AiTechies at [email protected]. See also our terms of service and support page.