Privacy Policy

1. Introduction

takeYourBill ("TYB", "we", "us", "our") is a billing, point-of-sale and business management software operated by qixolabs (qixolabs.com), having its address at Mumbai, Maharashtra, India. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

By creating an account or using takeYourBill, including our website, web app and mobile apps (together, the "Service"), you agree to this Privacy Policy. If you do not agree, please do not use the Service.

This policy is written to align with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act"), as applicable.

2. Who is who

• Customer / Business User: the shop, pharmacy, jeweller, supermarket, enterprise or other business that subscribes to takeYourBill.
• End Customers: the people whose details the Business User enters into the Service (for example, buyers, patients, khata or udhaar customers, loyalty members).
• Roles: For data about the Business User's own account, we act as the data fiduciary. For End Customer data and business records entered by the Business User, the Business User is the data fiduciary and we act as a data processor, handling that data only on their instructions and to provide the Service.

3. Information we collect

4. How we use information

We use information to:

1. Provide, operate and maintain the Service, including billing, inventory, accounting, GST and reporting features.
2. Create and manage your account and subscription, and process payments.
3. Send transactional messages you ask for, such as invoices, payment reminders and credit (udhaar) reminders to your End Customers on your behalf.
4. Provide customer support and respond to your requests.
5. Improve, secure and debug the Service, and develop new features.
6. Detect, prevent and investigate fraud, abuse and security incidents.
7. Comply with legal obligations, including tax, accounting and law enforcement requests.
8. Send you product updates and offers, where you have agreed or where permitted by law. You can opt out at any time.

5. Legal basis and consent

We process personal data based on your consent, to perform our contract with you, to comply with legal obligations, and for legitimate uses permitted under applicable law. Where we rely on consent, you can withdraw it at any time by contacting us, though this may limit our ability to provide the Service.

Business Users are responsible for obtaining any consents and giving any notices required before entering End Customer data into the Service or sending them messages.

6. How we share information

We do not sell your personal data. We share it only as follows:

• Service providers: cloud hosting, database and storage providers, payment gateways, SMS, email and WhatsApp Business API providers, analytics and error monitoring tools, and customer support tools. They may process data only to provide services to us and under confidentiality obligations.
• Within your account: users you add to your account can see the data their permissions allow.
• Legal and safety: where required by law, court order or government authority, or to protect the rights, property and safety of us, our users or the public.
• Business transfers: in a merger, acquisition, restructuring or sale of assets, your information may be transferred, and we will notify you if it affects your rights.
• With your direction: when you choose to share data, for example by sending an invoice to a customer or connecting a third-party integration.

7. Data storage, location and transfers

Your data is stored on secure cloud servers located in India. If any data is processed outside India, we take steps to ensure it is protected as required by applicable law.

8. Data retention

We keep your data while your account is active and as needed to provide the Service. After you close your account, we keep data for a limited period of 90 days to allow recovery, then delete or anonymise it, except where we must keep certain records longer for legal, tax, accounting or dispute-resolution reasons. Backups are deleted on a rolling schedule.

Business Users are responsible for maintaining their own statutory records. We recommend you export your data regularly.

9. Cookies

We use essential cookies (login, security, preferences) and, where applicable, analytics cookies. You can control cookies through your browser settings. Blocking essential cookies may stop parts of the Service from working.

10. Security

We use reasonable security practices, including encryption in transit, access controls, role-based permissions, and regular backups. No system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your password confidential, using strong credentials, and managing the permissions of your staff users. If you suspect unauthorised access, contact us immediately.

If a personal data breach occurs that affects you, we will notify you and the relevant authorities as required by law.

11. Your rights

Subject to applicable law, you may:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your personal data.
• Withdraw consent.
• Nominate another person to exercise your rights in case of death or incapacity.
• Raise a grievance with us, and, if unresolved, approach the Data Protection Board of India.

To exercise these rights, email support@qixolabs.com. If you are an End Customer of a Business User, please contact that business first, since they control your data. We will help them respond to your request.

12. Children

The Service is meant for businesses and is not directed at anyone under 18. We do not knowingly collect personal data of children. If you believe a child has provided us data, contact us and we will delete it.

13. Third-party links and integrations

The Service may link to or integrate with third-party services (for example WhatsApp, payment gateways, GST portals). Their privacy practices are governed by their own policies, and we are not responsible for them.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, notify you by email or in the web, app. Continued use of the Service after changes means you accept them.