Privacy Policy

• Account information: Name, email address, mobile number and password (hashed) when you register or sign in.
• Business information (vendors): Store name, address, category, product listings, logo and contact details provided during vendor registration.
• Payment information: UPI reference numbers (UTR) you submit for wallet top-ups. We do not store your UPI PIN, bank account number or card details.
• Transaction data: Wallet credits/debits, gift card purchase history, order IDs and voucher details.
• Location data: Approximate GPS coordinates used to show you nearby stores and products. In addition, for security and fraud prevention we record the exact device location (latitude, longitude and accuracy) at the time you make a payment — a wallet top-up, gift card purchase or recharge — and store it against that transaction. Location is only collected when you grant permission, and it is not shared with other users.
• Device & usage data: IP address, device type, operating system, browser/app version and page interactions collected automatically for security and performance monitoring.

• To create and manage your account and wallet.
• To verify UPI payments and credit your wallet balance.
• To process gift card purchases and deliver voucher codes.
• To show you nearby products and stores based on your location (only when location permission is granted).
• To record the exact location of each payment as evidence for fraud prevention, dispute resolution, and to assist law-enforcement or cyber-crime authorities when lawfully required.
• To send transactional notifications (order confirmations, wallet credits).
• To enable vendors to list stores and manage products via the CRM.
• To detect and prevent fraud, abuse and security incidents.
• To improve app performance and fix bugs.

• We do not sell your personal data to any third party.
• Voucher partners: To process gift card purchases, we share the required order details (product ID, denomination, quantity) with our licensed licensed voucher supply partner. No additional personal data is shared.
• Payment processors: UPI payments are made directly through your UPI app to our registered UPI ID. We do not process card or banking credentials.
• Service providers: We may use trusted third-party services (e.g., hosting, analytics, SMS OTP) that process data strictly on our behalf under confidentiality agreements.
• Legal obligations: We may disclose information if required by law, court order or government authority.

• For browsing (sorting nearby stores and products), location access is optional — you can use the app without it; only nearby sorting will be unavailable.
• For payments (wallet top-up, gift card purchase, recharge), sharing your exact device location is mandatory. This is a security and fraud-prevention measure: it lets us verify where a payment originated and provide evidence to banks or authorities in case of a dispute or fraud complaint. If you do not allow location, the payment cannot be completed.
• We may, at our discretion, require location access to open the app entirely during heightened-security periods (for example, an active fraud investigation).
• Payment-time location is stored against the specific transaction and used only for security, dispute resolution and legal compliance. It is not visible to other users and is not used for advertising profiling.
• Vendors may optionally pin their business address on a map during registration. This address is displayed publicly on the store listing page.

• Account and transaction data is retained as long as your account is active or as required by applicable law.
• You may request deletion of your account and associated data by contacting us at [email protected]. Deletion requests are processed within 30 days, subject to legal retention requirements.

• Passwords are stored as salted cryptographic hashes — never in plain text.
• All data is transmitted over HTTPS (TLS encryption).
• Access to production databases is restricted to authorised personnel only.
• Despite these measures, no system is 100% secure. Please keep your account credentials confidential and contact us immediately if you suspect unauthorised access.

Bill Bazaar is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may update your profile information within the app at any time.
• Deletion: You may request deletion of your account and data.
• Withdraw consent: You may revoke location permission at any time through your device settings, and withdraw consent for processing by closing your account. Withdrawal does not undo processing already carried out lawfully.
• Nominate: Under the DPDP Act you may nominate someone to exercise these rights on your behalf if you die or become incapacitated. Write to us to record a nominee.
• Grievance redressal: If you are not satisfied with our response you may complain to the Data Protection Board of India.

To exercise these rights, email us at [email protected].

If you use our billing software, you enter your customers' names, mobile numbers, addresses, GSTINs and transaction history. That data is yours — you decide what to collect and why, and you are responsible for having a lawful basis to hold it.

• For that data we act as a processor on your instructions: we store it, display it back to you, and use it to run the features you asked for (invoices, ledger, reminders). We do not sell it, mine it for our own marketing, or share it with other vendors.
• You can export it at any time from the dashboard, and delete individual records yourself.
• When you close your account, this data is deleted along with it, except where a law requires us to keep transaction records for a period.
• If one of your customers asks us directly to delete their details, we will point them to you — you are the one who holds that relationship.

Running Bill Bazaar means using specialist providers. Each receives only what it needs to do its job:

Each provider is bound by contract to process data only on our instructions. We do not sell personal data to anyone. If you need the identity of a specific processor — for your own compliance review, for example — write to our Grievance Officer and we will share it.

Payment providers you apply to through us (such as Cashfree) receive the application details you submit, and deal with you directly from then on.

Our database is hosted in India (Mumbai region). Some supporting services — hosting, email, notifications, analytics — process data on servers outside India under their own safeguards. By using Bill Bazaar you consent to that transfer, which is permitted for countries not restricted by the Government of India.

• We use browser local storage to keep you signed in, remember your language and theme, and hold an anonymous visitor id so we can count visits without identifying you.
• We do not use third-party advertising cookies and we do not run ad retargeting.
• Clearing your browser storage signs you out and resets those preferences. Blocking it entirely will stop parts of the app from working.

When you submit a billing-software enquiry, a payment-gateway application or a recharge request, we store what you entered — name, business, mobile, email, city and your message — so we can call you back and keep a record of what was asked. A copy is emailed to our support inbox and, where you gave an email, to you. These records are kept while the enquiry is live and for our own accounting afterwards.

A wallet top-up requires a screenshot of your payment. The image is stored against that top-up so we can verify it against our bank statement, and is visible only to our admin team. Please do not include anything in the screenshot beyond the payment itself.

Our app may contain links to third-party websites or brand pages. We are not responsible for the privacy practices of those sites. Please review their privacy policies independently.

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or by email. Continued use of Bill Bazaar after changes are posted constitutes acceptance of the updated policy.

For privacy-related questions, requests or concerns, contact us at: