Privacy Policy (DPDP Act Compliant)

Scan2bill.me is operated by (SCAN2BILL.ME) Domain.

• Mail Address: Bapu Aashram Road, Nayabad, Garia, Kol 069
• Contact Email: privacy@scan2bill.me
• Grievance Officer: Tanmay Jana – grievance@scan2bill.me

We are the Data Fiduciary under the Digital Personal Data Protection Act, 2023.

We collect the following categories of personal data:

From Merchants (Account Holders):

• Name
• Mobile number
• Email address
• Business name
• GSTIN (if provided)
• UPI ID
• Address
• Login credentials

From Invoice Data (entered by Merchant):

• Customer name
• Customer mobile number / email (if entered)
• Customer billing address
• GSTIN of customer (if entered)

Automatically Collected:

• IP address
• Device and browser information
• Usage logs (pages visited, actions taken)
• Consent records — each time you tick the Terms & Privacy consent box we store your IP address, date and time, and browser information as proof of consent

We do not collect payment card details, bank account numbers, or UPI PINs.

We process personal data only for the following specific purposes:

• Creating and managing your merchant account
• Generating GST invoices and sharing payment requests
• Providing customer support
• Improving the Platform and ensuring security
• Complying with legal obligations (including GST-related requirements)

We do not use your data for marketing without separate consent.

We process personal data on the basis of:

• Your consent (for account creation and optional features)
• Performance of contract (to provide the billing service)
• Compliance with legal obligations

• Account data: As long as your account remains active + 3 years after closure
• Invoice data: 8 years (as required under GST law) or longer if required by law

After the retention period, data is securely deleted or anonymised.

We may share data with:

• Cloud service providers (for hosting)
• SMS/Email service providers (for notifications)
• Government authorities when required by law

We do not sell personal data.

You have the right to:

• Access a summary of your personal data
• Correct inaccurate or incomplete data
• Erase personal data (subject to legal retention requirements)
• Withdraw consent at any time
• Nominate another person to exercise rights on your behalf
• Raise a grievance

To exercise any right, email us at privacy@scan2bill.me. We will respond within the timelines prescribed under the DPDP Act/Rules.

• Grievance Officer: Tanmay Jana
• Email: grievance@scan2bill.me

We will acknowledge your complaint within 24–48 hours and aim to resolve it within 30 days (or as per applicable rules). If unsatisfied, you may approach the Data Protection Board of India.

We implement reasonable technical and organisational measures including encryption, access controls, and secure servers to protect personal data.

Our Platform is not directed at children under 18. We do not knowingly process children’s personal data.

Currently, personal data is stored and processed within India. If we transfer data outside India in future, we will ensure compliance with Section 16 of the DPDP Act.

We may update this Privacy Policy. The updated version will be posted on the Platform with a revised “Last Updated” date.

For any privacy-related questions:

• Email: privacy@scan2bill.me
• Address: Bapu Aashram Road, Nayabad, Garia, Kol 069