Privacy Policy

1. Overview

BillBanao ("we," "us," or "our") operates the website billbanao.org (the "Service"). This Privacy Policy explains how we collect, use, and protect information when you use our Service.

2. Data We Collect (and Don't Collect)

Your invoice data stays on your device unless you opt in. Everything you type into the invoice generator (client names, addresses, line items, amounts, taxes) is processed locally in your browser by default — we do not see it. The only way invoice content reaches our servers is if you are a Pro user and explicitly choose to use the "Save to Cloud" feature — and you can delete anything you have saved at any time (see Section 6).

Information we do collect:
• If you purchase BillBanao Pro: We store your email address, Razorpay payment ID, license key, and a non-reversible hash of your device (for license activation and your 5-device limit) in our secure Cloudflare D1 database. This is strictly to deliver your license and provide payment-ID recovery; we never sell or share this data, and we never see your credit card details — all payments are processed by Razorpay.
• Anonymous Analytics: We record minimal, non-identifiable events (e.g. page views, "PDF Downloaded" clicks) plus a short-lived first-party session identifier to improve the app. No third-party advertising or tracking networks are used, and analytics never include your invoice contents.

3. Third-Party Services

We use the following trusted infrastructure partners:

• Razorpay: Handles all secure payment processing. We do not touch your financial data.
• Cloudflare: Provides our global hosting, web firewall, and secure D1 database infrastructure.
• Resend: Used exclusively to deliver your Pro license keys to your email inbox securely.
• Google Fonts: Font files are served from Google's CDN purely for visual styling; no personal data is sent to Google beyond your IP address (as with any web request).

4. Cookies

BillBanao does not use advertising or third-party tracking cookies. We set a single first-party session cookie ("billbanao_session_id") containing only a random identifier, used to distinguish unique visits for our anonymous analytics; it expires when you close your browser. Razorpay may set essential cookies during checkout to prevent fraud and process your transaction securely.

5. Data Security

Your invoice data is processed locally in your browser, and PDFs are generated client-side in your browser. If you opt in to Pro Cloud Storage ("Save to Cloud"), invoices are stored securely in Cloudflare D1 with AES-256 encryption at rest (TLS in transit), linked to your license key, and can be deleted by you at any time. We protect our infrastructure with Cloudflare's WAF, rate limits, and API-key authentication, and we never sell or share invoice or license data.

6. Cloud Invoices, Data Retention & Deletion

Pro users may optionally save invoices to the cloud (up to 500 per license). The full invoice document and client name are encrypted at rest (AES-256; the decryption key is held by us and never exposed to third parties), while a minimal summary (invoice number, total, timestamps) is kept in plaintext solely to render your saved-invoices list. You can delete any or all stored invoices at any time from the app, or request deletion by emailing contact@billbanao.org. If your subscription ends and is not renewed, stored invoices are removed after your access period ends. We do not sell or share invoice data.

7. Children's Privacy

Our Service is not directed to children under the age of 13. We do not knowingly collect any personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at contact@billbanao.org.