1. Introduction

InvoiceGST (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our GST invoice generation platform at invoicegst.in.

2. Information We Collect

2a. Information you provide

Account information: Email address and password when you sign up.
Business information: Business name, GSTIN, address, phone number, and bank details that you enter into invoices.
Customer information: Names, GSTINs, addresses, and emails of your customers.
Invoice data: Line items, amounts, tax details, and notes on your invoices.
Contact form: Name, email, and message when you contact our support.

2b. Information collected automatically

Usage data: Pages visited, features used, and browser/device type for improving the Service.
Log data: IP address, timestamps, and error logs for security and debugging.

3. How We Use Your Information

To provide, operate, and improve the Service.
To generate and store your GST invoices.
To send transactional emails (invoice delivery, account verification, password reset).
To process payments via Razorpay.
To respond to your support requests.
To detect and prevent fraud or abuse.

4. Data Storage and Security

Your data is stored securely in Supabase (hosted on AWS) with row-level security — each user can only access their own data. We use HTTPS for all data in transit. We never store your payment card details; payments are handled entirely by Razorpay.

While we take reasonable security measures, no system is 100% secure. We recommend using a strong, unique password for your account.

5. Data Sharing

We do not sell your personal data. We share data only with:

Supabase: Database and authentication infrastructure.
Razorpay: Payment processing for subscriptions.
Resend: Transactional email delivery.

These third parties process your data only as necessary to provide their services and are bound by their own privacy policies.

6. Anonymous Usage

The free invoice generator on the home page can be used without an account. In this case, we do not store any of the invoice data you enter — the PDF is generated server-side and immediately returned; nothing is persisted.

7. Your Rights

You have the right to:

Access the personal data we hold about you.
Correct inaccurate data by updating your account settings.
Delete your account and associated data by contacting us.
Export your invoice data by downloading PDFs.

To exercise these rights, contact us.

8. Cookies

We use session cookies for authentication purposes only. We do not use advertising or tracking cookies. You can disable cookies in your browser, but this may affect your ability to log in.

9. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with data, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a banner on the Service. Continued use after changes constitutes acceptance of the revised policy.

11. Contact

Questions about this Privacy Policy? Contact us.