Privacy Policy

1. Introduction

This Privacy Policy explains how InvoicePro (accessible at newinvoice.pro) collects, uses, stores, protects, and discloses personal and business information when you use our web application, create an account, or generate GST and commercial invoices.

We operate in strict accordance with applicable Indian privacy and data protection frameworks, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the principles of the Digital Personal Data Protection (DPDP) Act, 2023.

2. Information We Collect

We collect only the minimum necessary information required to generate your invoices and maintain your account:

• Account Credentials: Your full name, verified email address, and encrypted password hash (stored via irreversible bcrypt hashing).
• Business Profile Information: Enterprise name, trade name, business category (CA, Advocate, Transporter, Freelancer, Retailer), GSTIN, PAN, registered address, phone number, and optional company logo.
• Bank & UPI Payment Particulars: Bank name, account number, IFSC code, branch, and Virtual Payment Address (VPA / UPI ID) used strictly for encoding into your invoice Scan-to-Pay QR codes.
• Invoice & Customer Records: Customer names, shipping/billing addresses, customer GSTINs, item descriptions, HSN/SAC codes, quantities, rates, and tax calculations entered by you.
• Technical & Usage Logs: IP address, browser type, timestamp logs, and session tokens strictly utilized for login authentication, brute-force security defense, and server error diagnostics.

3. What We NEVER Collect or Store

To safeguard your financial privacy, InvoicePro explicitly does NOT collect, access, or store:

• UPI PINs, Netbanking login credentials, or One-Time Passwords (OTPs).
• Credit card or debit card numbers, CVVs, or card expiry details.
• Biometric identifiers or Aadhaar number databases.
• Bank account balances or direct transaction transaction history from your bank.

4. How We Use Your Information

We process your data strictly for legitimate operational purposes:

• Rendering, formatting, and generating your requested invoices, quotations, and bills.
• Generating instant Dynamic Scan-to-Pay UPI QR codes for your customers.
• Maintaining your invoice numbering sequences, customer auto-fill directories, and item databases.
• Sending critical transactional emails (such as email verification, password reset links, and security alerts).
• Preventing fraudulent activity, fictitious invoice spam, and unauthorized platform abuse.

5. Data Security & 256-Bit SSL Encryption

We employ robust administrative, technological, and physical safeguards to prevent unauthorized access, disclosure, or alteration of your business records:

• TLS 1.3 / HTTPS Encryption: All data transmitted between your browser and our servers is protected with end-to-end 256-bit SSL encryption.
• Bcrypt Password Hashing: Passwords are never stored in plain text and are hashed using salted, high-work-factor bcrypt cryptographic algorithms.
• Isolated Database Tenancy: User businesses and invoices are partitioned with strict query scoping, ensuring users can only ever access their own authenticated records.

6. Cookies & Local Storage

InvoicePro uses essential session cookies and local storage tokens solely to keep you logged in securely, preserve your selected active business profile, and remember your PDF layout customizations. We do NOT deploy third-party advertising cookies or cross-site tracking pixels.

7. Data Retention & Your Right to Deletion

We retain your invoice history and customer records for as long as your account remains active so that you can reprint, audit, or review past tax invoices.

Danger Zone Full Control: If you ever wish to remove a business entity or delete your account, you can initiate a permanent deletion directly from your account settings. This action permanently cascades and purges linked invoices, customers, and business metadata from our active production databases.

8. Third-Party Service Providers

We partner with reputable third-party infrastructure providers to support hosting, CDN font delivery, and transactional email dispatch. These providers are bound by strict data processing and confidentiality agreements and are prohibited from utilizing your personal data for any purpose other than facilitating platform infrastructure.