Privacy Policy

Effective 14 September 2026 · Version 1.0

What we collect

Account: email address, the name you choose to give, a salted password hash (never the password), the plans you hold and the month's usage counters (report runs, images, pages). Payments: Razorpay handles card and UPI details; we receive the payment id, amount and status only. Cloud data: only what a Service explicitly syncs when you are signed in on a plan that includes it — the Finance Tracker ledger and GST profiles. Technical: Cloudflare's standard request logs (IP address, user agent) for security and rate limiting.

What stays on your device

Marketplace GST files, generated workbooks and JSON, PDFs you split, and photographs you process with your own API key are handled in your browser and never reach IBI. The BG Remover's IBI Cloud engine forwards a photograph to the image-processing provider through our server and returns the result without storing it.

How we use it

To run the Services, enforce plan limits, activate what you have paid for, issue tax invoices, answer support requests and keep the Services secure. We do not sell personal data and we do not advertise.

Where it is stored

Account and cloud data are stored in Cloudflare's key-value storage; images pass through Cloudflare's network to the image provider. Data may be processed in countries other than yours by these providers under their own safeguards. Customers in the EU and UK: IBI acts as the controller of account data and as a processor of the content you sync; the rights below apply to you in full.

Retention and deletion

Cloud data lives while your account does. Delete your account from My account to remove the account record and all cloud data at once; usage counters expire on their own within 40 days. Payment records are kept for the period Indian tax law requires.

Your rights

Ask us for a copy of your account data, a correction, or deletion at indiabusinessinternational@gmail.com or WhatsApp +91 8939414799. We answer within 7 working days. This policy follows the Digital Personal Data Protection Act, 2023.

Cookies

One first-party session cookie keeps you signed in for 30 days. There are no advertising or analytics cookies.