Privacy Policy
Last updated: 1 June 2026
This Privacy Policy explains how Adyant Enterprise, the legal entity operating Smart Billing India ("we", "us", "our"), collects, uses, stores, and shares your personal data when you use www.smartbillingindia.com (the "Service"). For the personal data we collect from you directly, Adyant Enterprise acts as the data controller.
1. Information we collect
- Account data: name, email, password (hashed), phone number.
- Business data: business name, GSTIN, PAN, address, invoices, customers, items, and payments you create.
- Usage data: log data, device info, IP address, browser type, pages visited.
- Support data: messages you send to us via email or in-app support.
- Cookies: for authentication and session management.
2. How we use your information & legal basis
- Provide the Service (performance of a contract) — account creation, invoicing, GST reports, support.
- Security & fraud prevention (legitimate interests) — authentication, abuse detection, audit logs.
- Product improvement (legitimate interests) — analytics on feature usage, debugging.
- Transactional communications (performance of a contract) — invoice receipts, password resets, account notices.
- Legal obligations (legal obligation) — tax, accounting, and statutory records under Indian law (including the DPDP Act).
- Marketing (consent) — only where you have opted in; you can withdraw consent anytime.
3. Data sharing
We do not sell your personal data. We share data only with the following categories of recipients:
- Service providers / subprocessors — cloud hosting, database, email delivery, analytics, and customer support tooling, under confidentiality and data-processing agreements.
- Payment gateway — Razorpay — for processing subscription payments (card, UPI, netbanking, wallets). Razorpay is a PCI-DSS compliant gateway and acts as an independent controller for the payment data it collects during checkout. See Razorpay's Privacy Policy for details.
- Professional advisers — legal, accounting, and audit professionals where reasonably required.
- Authorities — where disclosure is required by law or to protect rights, property, or safety.
4. Data retention
We retain personal data only for as long as necessary for the purposes described above:
- Account & business data — for the life of your account, and up to 12 months after account deletion (to allow recovery).
- Invoices, GST records, and tax-related data — retained for at least 8 years as required by Indian tax law.
- Support correspondence — up to 3 years from the date of the last interaction.
- Server logs & security telemetry — up to 12 months.
- Backups — rotated and overwritten within 90 days.
5. Data storage & security
Your data is stored on secure cloud infrastructure with encryption in transit (TLS) and at rest, role-based access controls, and audit logging. We follow industry-standard practices to protect your information, but no method of transmission over the Internet is 100% secure.
6. Your rights
Subject to applicable law (including India's DPDP Act), you have the right to access, correct, update, export, or delete your personal data, and to withdraw consent where processing is based on consent. You can exercise most of these rights directly from your account Settings, or by emailingmail@adyantenterprise.in. We will respond within a reasonable timeframe and in accordance with applicable law.
7. Cookies
We use essential cookies for authentication and session management, and limited analytics cookies to understand aggregate usage. You can control cookies through your browser settings; disabling essential cookies may prevent you from signing in.
8. Children
The Service is not intended for users under 18. We do not knowingly collect data from children.
9. Changes
We may update this policy from time to time. Material changes will be notified by email or in-app.
10. Contact
For any privacy-related questions or to exercise your rights, emailmail@adyantenterprise.in.