Effective: April 18, 2026
1. Who we are
Apna Invoice is operated by Datasoft Technologies Pvt. Ltd. ("DST", "we", "us"), the data fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act").
2. Data we collect
- Account data: name, email, password hash, phone number.
- Business data: business name, GSTIN, PAN, address, logo.
- Invoice & customer data: records you create in the Service.
- Usage data: IP, device, browser, session events, product analytics.
- Support data: messages and attachments you send us.
3. How we use data
- To operate, secure, and improve the Service.
- To communicate about your account, updates, and security notices.
- To meet legal and tax obligations.
- For product analytics (aggregated, never sold).
4. Where data is stored
Your account and invoice data is stored on servers located in India. Backups are encrypted and also retained in-region.
5. Sharing
We do not sell your data. We share it only with: (a) subprocessors (hosting, email delivery, analytics) bound by contract; (b) authorities when legally required; (c) successors in the event of a merger or acquisition, subject to this policy.
6. Your rights
Under the DPDP Act and applicable law, you may:
- Access, correct, or update your personal data.
- Export your invoice and customer data at any time.
- Request deletion of your account and personal data.
- Withdraw consent for non-essential processing.
To exercise these rights, email privacy@datasoft.example. We respond within 30 days.
7. Retention
We retain your data while your account is active and for up to 7 years after closure to meet tax and record-keeping obligations under Indian law. Anonymised analytics may be retained indefinitely.
8. Security
We use TLS in transit, AES-256 at rest for backups, role-based access controls, and regular security reviews. See our Security page for detail.
9. Cookies
We use essential cookies for authentication and a small set of analytics cookies. Manage preferences on the Cookie Settings page.
10. Children
The Service is not directed to anyone under 18. We do not knowingly collect data from children.
11. Changes
We will announce material changes at least 30 days before they take effect.
Grievance officer
As required under Indian law, you may contact our grievance officer at grievance@datasoft.example.