Privacy Policy

1. Introduction & Scope

Welcome to the Privacy Policy of IndSoftWork Technology ("Company", "we", "us", "our"). BillKitna is a hybrid offline/cloud Point of Sale (POS) and billing application developed, owned, and operated by IndSoftWork Technology. We are committed to protecting the privacy, security, database configurations, and personal credentials of merchants and shopkeepers ("Users", "you", "your") who access our website (https://www.billkitna.in) and utilize the BillKitna POS Android application.

This policy outlines how we collect, store, encrypt, process, and protect your information in full compliance with the Indian Information Technology Act, 2000, the Digital Personal Data Protection Act (DPDP), Google Play Developer Policies, and Google AdMob Program Policies.

2. What Information We Collect

To supply a reliable, high-performance offline and cloud-connected POS system, we collect variables across the following categories:

• Account Profile Information: When you create an account, register your store, or subscribe to a premium plan, we collect your business name, merchant email address, phone/WhatsApp number, store physical address, and optional GSTIN.
• Operational Store Data: To guarantee lightning-fast operation without internet dependency, our Android app creates an encrypted local SQLite database on your device containing inventory items, sales records, customer credit ledgers (Khata), supplier lists, and expense records. When enabled, this data is encrypted and synced with our secure cloud servers (Supabase) via TLS 1.3.
• Hardware & System Permissions:
  • Camera Permission: Strictly used for the on-device live barcode and QR code scanner. Video and photo frames are processed locally in real-time on your device hardware; no camera imagery is stored or transmitted to external servers.
  • Notifications: Used for critical business alerts (low-stock alerts, payment confirmations, and automated backup notifications).
• Device & Diagnostic Telemetry: For technical stability, crash debugging, and software integrity, the app may capture anonymized device technical information such as device model, OS version, app version, and crash stack traces.
• Advertising Identifiers (Free Tier): In the free version of BillKitna POS, we integrate Google AdMob to deliver advertisements. The Google Mobile Ads SDK may automatically receive device identifiers (such as Android Advertising ID / Google Advertising ID - GAID), IP address (for coarse geographic location at city/country level), and advertising interaction metrics. Users on the paid Premium plan enjoy a 100% ad-free experience.

3. How We Use Your Information

We collect and process your information solely for legitimate operational and business purposes:

• To provide, operate, maintain, and enhance the BillKitna POS billing and inventory features.
• To enable secure cross-device synchronization and automated cloud disaster recovery backups.
• To authenticate your identity, prevent fraudulent logins, and ensure account security.
• To process subscription payments and renewals via RBI-licensed payment aggregators (PayU Payments / Google Play Billing).
• To provide responsive technical support and communicate vital service announcements.
• To serve contextual, non-intrusive banner and native advertisements via Google AdMob to support our free tier for small retailers.

4. Google AdMob & Advertising Disclosures

To keep BillKitna accessible to micro-merchants and kirana owners across India without upfront costs, the free version of BillKitna POS is monetized through advertisements powered by Google AdMob (provided by Google LLC).

5. Children's Privacy (COPPA & Family Policy Compliance)

BillKitna is an enterprise commercial point-of-sale utility designed exclusively for business owners, store managers, and retail operators. Our software and website are not directed to children under 13 years of age (or under 16/18 in relevant jurisdictions).

We do not knowingly collect, request, or solicit personal information from children. If we discover that personal data from a minor has been collected unintentionally, we take prompt steps to purge that information from our database records immediately. Furthermore, Google AdMob configurations inside BillKitna POS do not deliver age-inappropriate or adult content.

6. Data Security, Storage & Encryption

We implement industry-standard administrative, physical, and technological security controls:

• Transport Encryption: All client-to-server data transmission utilizes TLS 1.3 encryption with strict HTTPS protocols.
• Local On-Device Protection: In-app offline SQLite databases are stored within protected Android application sandboxes.
• Zero Data Selling: We never rent, broker, sell, or trade your inventory lists, customer ledgers, or business contact information to third-party telemarketers or brokers.

7. Third-Party Service Providers & Subprocessors

Data is shared only with verified third-party technology providers strictly required for service delivery:

• Google LLC (Google AdMob / Google Play Billing): For ad delivery on the free tier and Google Play in-app subscription verification.
• PayU Payments Private Limited: PCI-DSS certified payment aggregator for recurring Indian payment mandates, UPI, and debit/credit card settlements.
• Supabase Inc.: SOC2 compliant cloud database infrastructure for encrypted multi-device backups.
• Brevo (Sendinblue): Transactional email delivery for account recovery and receipt confirmations.

8. Account Deletion & User Rights

In adherence to Google Play policies and digital data protection laws, every user maintains complete sovereignty over their data:

• Access & Correction: You can review and edit your store profile and inventory at any time inside the app.
• Data Export: You can export your product catalogs, invoices, and sales reports to Excel/PDF formats locally.
• Permanent Account Deletion: You can submit a deletion request anytime via the App Settings menu or through our dedicated web page at billkitna.in/delete-account.html. All associated cloud backups, store records, and authentication credentials will be permanently erased within 7 business days.

9. Grievance Redressal & Contact Officer

In compliance with the Information Technology Act 2000 and the Digital Personal Data Protection Act, contact details of our Grievance Officer are provided below: