What happens to your shop's data.

01 · What we collect

Only what it takes to run the shop

Your mobile number (the code to sign in comes on WhatsApp), your name and shop name, and an email address if you add one; the names and numbers of staff you add; the products, stock, customers, suppliers, bills, payments and udhaar you enter; and an identifier for each device, so data syncs to the right place and each person is signed in on one device at a time.

• Your number, name and shop name
• The shop's own records: bills, stock, customers
• Staff you add, so they can sign in
• A device identifier for syncing

02 · On your phone

Saved on the phone first, then synced

Your data is written to the phone first, so billing, stock and udhaar keep working with no internet. When you are online it syncs to our servers over an encrypted connection, so it is not lost if a phone is, and the same shop opens on your computer too.

03 · Who can see it

The people in your shop, and our staff only as far as they need

Each shop's data is kept separate from every other shop's. Inside your shop, each person sees what their role allows. To run the service, BillCountr staff can see your account details: the shop, its people and phones, its plan and whether it is syncing. To see your bills, stock or customers, a support person needs a recorded grant that says who, why and until when, and it ends on its own.

04 · Who helps us

A few providers, each with the least they need

WhatsApp (Meta) sends sign-in codes, staff members' sign-in details when you add them, and account messages, so it receives those numbers, names and messages. Our hosting and database provider runs the service, on servers in Mumbai. Our storage provider holds the pictures you upload and your plan invoices, and a private nightly backup of the database. Razorpay takes payment for a plan; we send it your email, and card, UPI and bank details go to Razorpay, never to us. Google's Firebase delivers notifications. We do not sell or rent anyone's data.

05 · Notifications

Alerts about your shop, and nothing else

BillCountr can alert you about bills that are not reaching the server, stock running out, udhaar that is due, a sign-in on another device and your day summary. Alerts worked out on your phone never leave it. The ones only the server can know about are delivered through Google's Firebase Cloud Messaging, which receives the device's notification token and the two lines you see on the lock screen. Depending on the alert, those lines can include a customer's or staff member's name, an amount, an invoice number or a device name; your bills, product list, customer list and ledger are never sent through it. Notifications are never advertising, and every kind can be switched off.

• Permission is asked after sign-in, never on first launch
• Device-raised alerts are computed offline and never sent
• Choose which kinds you receive, per device
• The token is deleted on sign-out or device removal

06 · How long

How long we keep it

For as long as your account is active. Things you delete go to a recycle bin, where you can bring them back for 30 days; after that they cannot be restored from the app. Saved bills and the record of changes are kept for as long as the account exists, and cannot be edited. Backup copies of the database are kept for up to 30 days.

07 · Your choices

Seeing, correcting or deleting your data

The shop's owner can delete the shop from inside the app or the dashboard, under Settings, without asking us: it goes 7 days later, and the owner can stop it until that day. For a copy of your personal data or a correction, write to support@billcountr.com from your registered number or email. We remove your personal data, apart from records the law requires us to keep. Your shop's own records can also be exported at any time, on every plan.