Privacy Policy

1. Information We Collect

Account Information

• Name, email address, phone number
• Business name, address, and type
• GSTIN, PAN number, and other business licence numbers
• Profile photo / business logo

Business Data

• Invoice data — customer names, addresses, GSTINs, phone numbers
• Product and service details including HSN codes and pricing
• Transaction records and payment information
• Order and purchase order data

Usage Data

• IP address, browser type, device information
• Pages visited, features used, time spent on the Service
• Error logs and performance data

2. How We Use Your Information

• To provide, maintain, and improve the Service
• To process subscription payments via Razorpay
• To send transactional emails (invoices, receipts, account notices)
• To provide customer support
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations under Indian law
• To send product updates and promotional communications (you may opt out at any time)

3. Data Storage and Security

Your data is stored in Supabase (PostgreSQL) hosted on Amazon Web Services (AWS) in the Mumbai region (ap-south-1) — within India. We implement the following security measures:

• Row-level security — only you can access your business data
• SSL/TLS encryption — all data in transit is encrypted
• Encryption at rest — data stored is encrypted
• Automatic daily backups — your data is backed up every 24 hours
• Access controls — staff access is strictly limited and logged

4. Data Sharing

We do not sell your data. Ever.

We share your information only with trusted service providers who help us operate the Service:

We may also share information when required by law, court order, or government authority.

5. Your Rights (DPDP Act 2023)

Under India's Digital Personal Data Protection Act 2023 and applicable laws, you have the right to:

• Access — request a copy of your personal data we hold
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and associated data
• Portability — export your invoices and business data as CSV at any time
• Withdraw consent — opt out of marketing communications at any time
• Grievance redressal — raise a complaint with our Data Protection Officer

To exercise any of these rights, email us at connect@digitoly.com. We will respond within 30 days.

6. Cookies

We use essential cookies and local storage to keep you logged in and remember your preferences. We do not use advertising or tracking cookies. We do not use Google Analytics or any third-party tracking tools.

7. Data Retention

• Active accounts — data retained for the duration of your subscription
• Cancelled accounts — data retained for 90 days, then permanently deleted
• Invoice data — may be retained for 7 years to comply with Indian tax laws (GST Act requirement)
• Payment records — retained as required by Razorpay and financial regulations

8. Children's Privacy

The Service is not intended for persons under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

10. Contact & Grievance Officer