Skip to content
MyBillHub
FeaturesIndustriesPricingDownloadContact
Log inStart free

MyBillHub Privacy Policy

Last updated: 15 November 2026

MyBillHub ("we") makes MyBillHub, a billing, accounting and inventory service for businesses in India, available as an Android app, a web app and a website. This policy explains what personal data we collect, why, who helps us process it, and the choices you have. It follows India's Digital Personal Data Protection Act, 2023 and the IT Rules. Write to contact@mybillhub.in with any question or request.

What we collect

  • Account details, your name, email address, your password (stored only as a one-way hash that we can't read), and the devices and browsers you sign in from.
  • Your business records, business profile, GSTIN, parties, items, invoices, bills, payments, stock, staff and reports you enter. You own this data; we process it only to provide the service to you.
  • Contacts, in the Android app, only when you choose "Import contacts", and only the names and numbers you pick.
  • Photos and files, logos, signatures and attachments you upload.
  • Location, only for staff who turn on "Share my location during work", only while checked in and during shift hours.
  • Payments, subscriptions are paid through Razorpay. We receive payment and mandate references and the amount, never your card number, UPI PIN or bank login.
  • Website enquiries, what you write in our contact form (name, email, phone, business, message).
  • Usage and diagnostics, basic logs (time, IP address, device type, errors) to keep the service secure and working. In the Android app, crash reports and usage statistics (which screens are opened, app version, device model, a random app ID and your account ID). On the website and web app, page visits, only if you allow analytics cookies. These never include names, phone numbers, GSTINs, amounts or other business records.

How we use it

To provide MyBillHub (keeping your phone and browser in sync, making PDFs, reports and GST outputs, reminders you set up), to keep accounts secure, to process payments, to answer support requests, to improve the service, and to meet legal obligations. We do not sell personal data and we don't show third-party advertising.

Cookies

The web app uses one essential cookie to keep you signed in securely. With your permission, asked on your first visit, the website and the web app also use Google Analytics cookies to count visits and see which pages are used. We don't use advertising cookies, and nothing from Google Analytics loads until you choose "Allow". You can change your choice at any time with "Cookie settings" at the bottom of the website, or in the web app under Settings, Help.

Who processes data for us

We use trusted service providers, each only to provide its service to us:

  • Cloud hosting and databases, to run the service and store your records and backups.
  • Email delivery, for sign-in, password reset and invitation emails.
  • Cloudinary, to store uploaded files such as logos, signatures and attachments.
  • Razorpay, for subscriptions, autopay mandates and payments.
  • Google (Firebase Crashlytics and Google Analytics), for crash reports and usage statistics in the Android app, and for page statistics on the website and web app when you allow analytics cookies.
  • Your GST Suvidha Provider, when you generate e-invoices or e-way bills or look up a GSTIN.

Some providers may store data outside India. When they do, it is protected as the law requires and as described in this policy.

Retention

Business records are kept while your account is active. Deleted entries stay in the recycle bin for 30 days. Staff location points are deleted after 90 days. When you delete your account, it is erased after a 30-day grace period, except records the law requires us to keep (for example, billing records for tax purposes).

Your rights and choices

You can see and correct your data in the app, export everything (Settings → Data & control → Export), withdraw location consent at any time, and delete your account (Settings → Account). You can also write to us to access, correct or erase your personal data, or to nominate someone to act for you. We respond within 30 days.

Security

Data is encrypted in transit (TLS) and at rest; e-invoice credentials are encrypted with a separate key. Access inside your business is limited by the roles you choose, and every change is recorded in the activity log.

Children

MyBillHub is meant for businesses and isn't directed at children under 18.

Changes

We'll tell you in the app or by email before material changes to this policy take effect.

Complaints

Write to contact@mybillhub.in with any complaint about how your data is handled. We acknowledge complaints within 48 hours and resolve them within 30 days.