Privacy Policy

For shop owners, their staff and anyone who contacts us, Arsi Consultancy decides how data is used and is the data fiduciary. The records a shop keeps about its own customers (names, phone numbers, GSTINs, invoices) belong to the shop: Arsi Consultancy stores and syncs them only to run the service for that shop. A shop’s customer should make any request about their data to the shop, which can edit or delete it in BillKim.

• Account details: the owner’s email address, which they sign in with using a one-time code, and the shop code we give the shop. Staff have a name, a username and a role; they sign in with the shop code, their username and a password, which we store only as a secure hash.
• The shop’s records: the customers, products, stock, invoices, estimates, payments, taxes, roles and settings entered in the app. They are saved on the device first and, when the device is online, synced to our servers so they are backed up and reach the shop’s other devices. Invoice branding (logo, colours, signature) and printer settings stay on each device.
• Devices: for each signed-in device, its name, platform and when it last synced, so the owner can see and sign out devices and so the plan’s device limit can be applied.
• Billing: the plan, subscription and our GST invoices for it. Card, UPI and bank details are collected and stored by Razorpay, our payment partner, under its own privacy policy; we receive only a confirmation and the details needed to identify the payment.
• Country: the country a connection comes from, looked up from its IP address by Cloudflare, so that BillKim knows which currency to bill the shop in. The IP address itself is not kept for this.
• On the device: the apps keep the sign-in as a token on the device. The Android and iOS apps use the camera only when you scan a barcode, read your contacts only when you choose to pick a customer from them, open the photo library or a file only when you choose a logo or a CSV file to import, and use Bluetooth only to reach a receipt printer you pick. The desktop app uses the printers and ports you choose for receipts.
• Crash reports: when the Android or iOS app crashes, Firebase Crashlytics (Google) receives a report of what went wrong and on which device model, so we can fix it. It does not include your shop’s records.

• The website asks Cloudflare for your country to show prices in the right currency. We use no advertising trackers or analytics cookies. Signing in to the owner’s account page sets a session cookie, which is all it is used for.
• If you chat with the assistant, we keep the conversation, and any contact details you choose to give, to answer you and follow up. Don’t share anything you would rather we didn’t keep.

• to run the apps, sync and back up each shop’s records, and sign people in;
• to bill, invoice and support subscriptions, and to email codes and invoices;
• to keep the service secure, prevent fraud and misuse, and debug problems;
• to meet legal duties such as tax and accounting records;
• to improve BillKim, using aggregated figures (such as invoices synced per month) that do not identify anyone.

We rely on your consent when you open an account or contact us, and on our legitimate uses for security, record-keeping and running the service.

• Your shop: the owner and the staff they add see the shop’s records, as far as their roles allow.
• Service providers that run BillKim for us: our cloud hosting and database provider; Cloudflare, which looks up a connection’s country; ZeptoMail by Zoho, which delivers sign-in codes, invoices and other emails; Razorpay for subscription payments; Google’s Firebase Crashlytics for crash reports; and the AI provider that answers the assistant’s chats. Each acts on our instructions.
• Authorities, where the law requires it or to protect someone’s safety.

We do not sell personal data and do not share it for advertising.

• A shop’s records are kept for as long as the shop has an account. Deleting something in the app deletes it from our servers on the next sync.
• The owner can remove a staff login in the app at any time; that login’s devices are signed out at once. Invoices the person made stay in the shop’s records.
• When an owner asks us to delete the shop’s account, its records, staff logins and devices are deleted within 30 days. Our invoices for its subscription are kept for eight years, as Indian tax law requires. See Delete your BillKim account.
• Payment notices from Razorpay are kept for 90 days; server logs and our record of emails sent, for up to 90 days. Assistant conversations are kept for up to twelve months.
• Database backups are kept for up to six months, after which they are deleted; data removed from BillKim disappears from the backups as they expire.

All traffic to BillKim is encrypted in transit. Owners sign in with one-time codes sent to their email; staff and our own console accounts use passwords that we store only as secure hashes. Access to production systems is limited to the people who run them. No system is perfectly secure, so if you believe your data has been exposed, tell us at once.

You can ask us to tell you what personal data we hold about you, correct it, delete it, or withdraw consent you gave earlier. Shops can edit and delete their own records in the app, and export all of them from Settings. A shop’s customers should send requests about their data to the shop. We answer requests made to us within 30 days. If you are unhappy with our answer you may complain to the Data Protection Board of India.

BillKim is a business tool for adults. We do not knowingly collect data from children under 18.

BillKim’s servers are in India. Some providers, such as email delivery, crash reporting and the assistant’s AI provider, may process data outside India under their own safeguards.

We may update this policy. The date at the top shows the current version. Material changes are emailed to subscribing shops before they take effect.

Privacy questions and requests go to support@billkim.app marked “Privacy”. Our grievance officer can be reached at the same address. Postal details are on the contact page.