Privacy Policy

This Privacy Policy explains how DhandhaBook (“we”, “us”) collects, uses, stores and protects information when you use the DhandhaBook mobile application and the website dhandhabook.in (together, the “Service”). By using the Service you agree to this policy.

1. Information we collect

• Account information: your mobile number, used to sign you in with a one-time password (OTP).
• Business data you enter: business profile (name, GSTIN, PAN, address, bank & UPI details, logo, signature), customers/suppliers, items, invoices and other documents, payments, expenses, leads, notes and tasks.
• Contacts (optional): only if you choose “Import from contacts”, we read names and phone numbers on your device so you can select which ones to add as parties. Unselected contacts are never uploaded.
• Camera (optional): used only on-device to scan barcodes. No images are stored or uploaded.
• Photos (optional): only the logo/signature image you pick is uploaded to your private storage.
• Purchase information: Google Play purchase tokens and subscription status, to verify your subscription. We never receive your card or UPI details — payments are processed by Google.
• Technical data: basic logs (e.g. errors, timestamps) needed to operate and secure the Service.

2. How we use information

• To provide the Service: authenticate you, store and sync your business records, generate documents and reports.
• To send OTP SMS via our messaging provider.
• To verify and manage your subscription.
• To provide support and improve reliability and security.

We do not sell your data, and we do not use your business data for advertising.

3. Sharing

We share data only with service providers that help us run the Service, under confidentiality obligations: cloud database & storage hosting (Supabase), SMS delivery (Bird) for OTPs, and Google Play for billing. We may disclose information if required by law. Documents you share (e.g. via WhatsApp) are shared by you to recipients you choose.

4. Storage & security

Data is encrypted in transit (HTTPS/TLS) and stored on secured cloud infrastructure with row-level access controls so that only your account can access your business records. A cached copy is kept on your device for offline viewing.

5. Retention & deletion

We retain your data while your account is active. You can delete your account and all associated data at any time from the app (Settings → Delete account) or by following the steps on our account deletion page. Deletion is permanent and completed within 30 days, except where we must retain limited records by law.

6. Your rights

You may access, correct, export (Settings → Export all data) or delete your data. Under the Digital Personal Data Protection Act, 2023 you may also contact our Grievance Officer at support@dhandhabook.in.

7. Children

The Service is intended for business use by persons aged 18 and above.

8. Changes

We may update this policy. Material changes will be notified in the app or on this page.

9. Contact

Email: support@dhandhabook.in