Privacy Policy

Last updated: 30 April 2026

⚡ TL;DR: Your invoice data NEVER touches our servers. The plugin runs entirely on your computer. We only collect what's needed for billing (name, email, payment info via Razorpay).

1. Who we are

GST Invoice Generator is a product of ByteZBridge ("we", "us"), based in Chennai, Tamil Nadu, India.

Company website: bytezbridge.com
Product website: gstinvoice.app
Privacy contact: hello@gstinvoice.app

2. What data we collect

From you, at purchase:

Full name
Email address
Phone number
GSTIN (optional)
Payment details (handled entirely by Razorpay; we never see your card or UPI details)

Automatically:

IP address (for fraud prevention; deleted after 30 days)
Browser type and timestamp of purchase

What we DON'T collect:

Your invoice contents
Your customers' names, GSTINs, or amounts
Your business revenue or financial data
Any data the plugin generates locally on your device

3. How we use your data

The data we collect is used solely to:

Process your payment and issue your licence key
Send you the plugin download and updates
Provide customer support when you contact us
Comply with Indian tax law (we keep purchase records for 7 years as required)

We do NOT use your data for advertising, marketing to third parties, or training AI models.

4. Where we store your data

Customer purchase records are stored in:

Railway (US-West-2) — our hosting provider, encrypted at rest
Razorpay (India) — payment processor, retains payment records per RBI requirements
Resend (US/EU) — email delivery, used for licence emails and support replies

5. Third parties we work with

We share minimum necessary data with:

Razorpay — to process your payment (covered by their Privacy Policy)
Railway — hosting our backend (purchase records only)
Resend — sending transactional emails
GoDaddy — domain registration

We never sell your data. Period.

6. Your rights (DPDP Act 2023)

Under India's Digital Personal Data Protection Act, you have the right to:

Access the data we hold about you
Correct inaccurate data
Request deletion of your data (subject to our 7-year tax record retention obligation)
Withdraw consent for marketing emails (we don't send any)

To exercise any right, email hello@gstinvoice.app. We respond within 30 days.

7. Cookies

Our website uses minimal cookies — only what's needed to keep you logged in during checkout. No tracking cookies. No third-party analytics by default.

8. Data security

We use industry-standard practices:

HTTPS everywhere (TLS 1.2+)
Encrypted database
Limited employee access (currently: just the founder)
Razorpay PCI-DSS Level 1 compliant for payments

9. Children's data

Our service is not intended for users under 18. We do not knowingly collect data from children.

10. Changes to this policy

We will email you about material changes at least 14 days in advance. Minor edits (typos, formatting) may happen without notice.

11. Contact

Privacy questions? Email hello@gstinvoice.app with "Privacy" in the subject line.