Privacy Policy

We collect the following types of information:

Personal Data: Name, email address, phone number, business name, GSTIN, and billing address provided during registration.

Voice Data: Audio recordings when you use voice commands to create invoices, log expenses, or perform other actions. These recordings are processed to extract text and are not stored permanently unless you opt in.

Business Data: Invoices, expenses, payment records, customer information, and inventory data that you create or manage through the Service.

Usage Data: Information about how you interact with the Service, including features used, pages visited, and time spent.

Device Information: Device type, operating system, browser type, IP address, and unique device identifiers.

We use your information for the following purposes:

• To provide, maintain, and improve the Service
• To process voice commands and generate accounting records
• To calculate GST and generate tax-compliant reports
• To send you AI-powered business insights and alerts
• To communicate with you about service updates and support
• To comply with legal obligations, including GST regulations
• To detect, prevent, and address security issues
• To analyze usage patterns and improve user experience

Your data is stored on secure servers located in India. We implement industry-standard security measures including:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Automated backups with encrypted storage

We retain your personal data only for as long as necessary to provide the Service and comply with legal obligations. You can request deletion of your data at any time.

We may share your information with the following third-party services:

• Google OAuth: For account authentication (email and profile information)
• Cloud Infrastructure: For hosting and data storage (Indian data centers)
• Analytics Services: For understanding usage patterns (anonymized data only)
• Payment Processors: For processing subscription payments (payment details only)

We do not sell, rent, or trade your personal information to any third party.

Under the DPDP Act 2023 and applicable Indian laws, you have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request erasure of your personal data
• Portability: Request your data in a structured, machine-readable format
• Withdraw Consent: Withdraw consent for data processing at any time
• Grievance Redressal: File a complaint with our Data Protection Officer or the Data Protection Board of India

To exercise these rights, contact us at info@bolbahi.app.

BolBahi is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will take steps to delete such information promptly.

We use essential cookies to maintain your session and preferences. We also use Google Analytics 4 (GA4) to understand how our Service is used in aggregate — IP addresses are anonymised by default and no advertising identifiers are collected. You can disable analytics by blocking cookies in your browser, or by installing the official Google Analytics Opt-out add-on.

• Essential Cookies: Required for the Service to function (session, authentication)
• Analytics Cookies (Google Analytics 4): Help us understand usage patterns; IP anonymisation enabled by default
• We do not use advertising or tracking cookies

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: info@bolbahi.app Data Protection Officer: info@bolbahi.app Address: Orrizonte Technologies Pvt Ltd, T4, 11th Floor, Assotech Business Cresterra, 1115, Sector 135, Noida, Uttar Pradesh 201304

For grievances related to data protection, you may also contact the Data Protection Board of India as established under the DPDP Act 2023.