Privacy Policy

1. Introduction

SmartGST Invoices (“SmartGST”, “we”, “our” or “us”), accessible at https://www.invoicemaker.co.in, provides a GST-compliant invoicing, quotation and filing platform for Indian businesses. We are committed to protecting the privacy and security of the personal and business information you share with us.

This Privacy Policy describes what information we collect, why we collect it, how we use and protect it, and the choices you have. It applies to all users of our website, web application and related services (collectively, the “Service”). By using the Service, you consent to the practices described in this policy.

2. Information We Collect

We collect the following categories of information to operate and improve the Service:

• Account information: your name, email address, mobile number and password (stored only in hashed form).
• Business information: business name, GSTIN, PAN, address, state, logo, signature, and bank / UPI details you add for invoicing.
• Customer & transaction data: the clients, invoices, quotations, credit/debit notes, expenses, purchases and payment records you create in the app.
• Payment information: subscription and ₹1 trial payments are processed by Razorpay. We receive payment status and reference IDs, but we do not store your full card or bank credentials.
• Communications: messages you send us for support, feedback or suggestions.
• Technical & usage data: IP address, browser type, device information, pages visited and feature usage, collected via cookies and analytics tools such as Google Analytics and Microsoft Clarity.

3. How We Use Your Information

We use your information to:

• Provide and operate the invoicing, quotation, GST filing, reporting and related features.
• Generate PDF documents, GST returns (GSTR-1 / GSTR-3B data) and reports.
• Send transactional communications you request or enable — OTPs, payment reminders, invoice/quotation delivery via email, SMS or WhatsApp.
• Process subscription payments and manage your plan, including the ₹1 trial and renewals.
• Provide customer support and respond to your requests.
• Monitor, secure, maintain and improve the Service, and prevent fraud or abuse.
• Comply with applicable legal, tax and regulatory obligations.

4. Legal Bases for Processing

We process your information where it is necessary to perform our contract with you (providing the Service), where we have a legitimate interest (such as securing and improving the Service), where you have given consent (such as for optional marketing or certain cookies), and where processing is required to comply with a legal obligation.

5. Payments

All online payments — including subscription fees and the ₹1 trial — are processed securely through Razorpay, our third-party payment gateway. Razorpay handles your card, UPI and banking details in accordance with PCI-DSS standards. We do not store your full payment credentials on our servers; we only retain payment status, amounts and reference identifiers necessary for billing and record-keeping.

6. Sharing & Disclosure

We do not sell your personal or business data. We share information only in the following limited circumstances:

• Service providers: trusted vendors that power the Service, such as Razorpay (payments), Twilio / MSG91 (SMS OTP), WhatsApp Business API (messaging) and email delivery providers — used only to deliver the features you use.
• Your recipients: when you send an invoice, quotation or payment link to a client, the relevant document data is shared with that recipient.
• Legal requirements: when required by law, regulation, legal process or a valid government request.
• Business transfers: in connection with a merger, acquisition or sale of assets, subject to this policy.

7. Data Security

We implement reasonable technical and organisational measures to protect your data, including encrypted transport (HTTPS), hashed passwords, signed session tokens, access controls and secured database storage. While we strive to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your account, business and transaction records for as long as your account remains active and for the period required to meet legal, accounting and tax obligations (for GST records, this may be several years as prescribed by law). When data is no longer required, we delete or anonymise it. You may request deletion of your account at any time (see Your Rights).

9. Your Rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Correct or update inaccurate information — most of which you can edit directly in the app.
• Export your business data (invoices, clients, reports) from within the app.
• Request deletion of your account and associated personal data.
• Withdraw consent for optional processing, such as marketing communications.

10. Cookies & Analytics

We use cookies and similar technologies for authentication, to remember your preferences, and to understand how the Service is used. We use Google Analytics and Microsoft Clarity to collect aggregated usage and behavioural analytics that help us improve the product. You can control or disable cookies through your browser settings; some features may not function correctly if cookies are disabled.

11. Children’s Privacy

The Service is intended for businesses and individuals aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal requirements. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you within the app or by email.

13. Contact Us

If you have questions, concerns or requests regarding this Privacy Policy or your data, please contact us at support@invoicemaker.co.in. We will respond within a reasonable timeframe.