THEBILLX PRIVACY POLICY
Effective Date: July 9, 2026
Last Updated: July 9, 2026
Platform: www.thebillx.com | TheBillX Android App
Contact: sevenseas8586@gmail.com
1. WHO WE ARE
TheBillX operates a billing and inventory management platform for small businesses worldwide at www.thebillx.com and via our Android application.
This Privacy Policy complies with:
- Information Technology Act, 2000 (India)
- Digital Personal Data Protection Act, 2023 (India)
- IT (Reasonable Security Practices) Rules, 2011
- Consumer Protection (E-Commerce) Rules, 2020
- GDPR principles (for EU/UK users)
2. WHAT DATA WE COLLECT
A. Android App — Zero Data Collection
All business data (invoices, customers, inventory, udhaar) is stored exclusively on your device. We have zero access to this data.
B. Web App — Minimal Data Only
What We Collect | Why | Where Stored
Anonymous device fingerprint | Trial management | Supabase (Singapore)
Trial bill count | Enforcing free trial | Supabase (Singapore)
Trial start date | Enforcing trial duration | Supabase (Singapore)
Consent timestamp | Legal compliance | Supabase (Singapore)
Google account email | Login identity | SessionStorage only (your browser)
Google account name | Display only | SessionStorage only (your browser)
We do NOT collect or store:
❌ Your business data, invoices, or customer records
❌ Payment details or UPI/PayPal credentials
❌ Location or GPS data
❌ Advertising IDs or tracking cookies
❌ Any data beyond what is listed above
C. Google Drive Integration
When you sign in with Google, TheBillX saves your business data to YOUR OWN Google Drive account (TheBillX_Data.json file). TheBillX never reads, accesses, or stores this data on our servers. It is yours, in your Google account, always.
D. Support Communications
If you email sevenseas8586@gmail.com, we collect only what you share in that email.
3. LEGAL BASIS FOR PROCESSING (DPDP ACT 2023 / GDPR)
Processing Activity | Legal Basis
Anonymous trial tracking | Legitimate interest + Consent
Google login session | Contract performance (providing the service)
Consent record | Legal obligation
Support emails | Contract performance
4. GOOGLE SIGN-IN AND DRIVE
- We use Google OAuth 2.0 for authentication
- Scope requested: drive.file (access only to files TheBillX creates), email, profile
- Your Google credentials are never stored by TheBillX
- Your business data goes to YOUR Google Drive — not our servers
- You can revoke TheBillX's Google Drive access anytime at myaccount.google.com/permissions
5. DATA SHARING
We do not sell, rent, or trade your data. We share only with:
Service Providers:
- Supabase Inc. (USA/Singapore) — anonymous trial data only
- Telegram — admin payment notifications only (no user data)
- Google LLC — OAuth authentication and Drive storage (your own account)
Legal Requirements: We may disclose if required by law or court order.
6. DATA RETENTION
Data | Retention
Anonymous trial fingerprint | 2 years from last activity
Paid plan records | 5 years (legal/tax compliance)
Consent records | 5 years (DPDP Act)
Support emails | 1 year
Google session data | Until browser tab closes (sessionStorage)
Google Drive data | Until you delete it from your own Drive
7. DATA SECURITY
- HTTPS/TLS encryption for all transmission
- Row Level Security on Supabase database
- Google OAuth industry-standard authentication
- Your business data protected by Google's security (in your Drive)
8. YOUR RIGHTS
Under DPDP Act 2023 (India) and GDPR (EU/UK):
- Right to Access — know what data we hold
- Right to Correction — fix inaccurate data
- Right to Erasure — delete your trial data
- Right to Data Portability — export your data (Settings → Export)
- Right to Grievance Redressal — complain to our Grievance Officer
- Right to Withdraw Consent — stop using the service
To exercise rights: sevenseas8586@gmail.com
Response time: 30 days
9. INTERNATIONAL USERS
TheBillX serves users globally. Anonymous trial data is stored on Supabase servers (Singapore/USA). By using TheBillX, you consent to this transfer with adequate protections in place.
For EU/UK users: We process minimal data under GDPR Article 6(1)(b) (contract performance) and Article 6(1)(f) (legitimate interests).
10. CHILDREN'S DATA
TheBillX is for business use only. Not intended for persons under 18. Contact us immediately if you believe a minor has used the platform.
11. COOKIES AND LOCAL STORAGE
- No advertising cookies
- No third-party tracking
- Browser sessionStorage: used for login session only (clears when browser tab closes)
- Browser IndexedDB: stores your business data locally on your device
12. GRIEVANCE OFFICER
Platform: TheBillX
Email: sevenseas8586@gmail.com
Location: Delhi, India
Response Time: 30 days
Escalation: Data Protection Board of India | Consumer Forum | Delhi Courts
13. CHANGES TO THIS POLICY
Material changes indicated by updating "Last Updated" date. Continued use = acceptance.
14. CONTACT
Email: sevenseas8586@gmail.com
Website: www.thebillx.com
Location: Delhi, India