Privacy Policy
How we collect, use, and protect your data — aligned with the Digital Personal Data Protection framework
Last updated: January 2026
Information We Collect
- Account information — name, email, phone number, password (hashed)
- Business information — company name, address, GSTIN, logo, industry
- Customer & invoice data — records you create inside the platform (invoices, customers, inventory, HR records)
- Tax information — GSTIN, PAN, tax rates, filing data you enter
- Payment information — billing address and transaction records (card details are processed by our payment partners; we never store full card numbers)
- Usage data — pages visited, features used, device/browser information
How We Use Your Information
- Provide, operate and improve the Invozeo platform
- Process subscriptions and payments
- Send transactional emails (invoices, OTPs, alerts, reminders)
- Provide customer support and respond to requests
- Analytics — understand feature usage to improve the product
- Legal compliance — tax, regulatory and audit requirements
Cookies
We use essential cookies for login sessions and security, and analytics cookies to understand product usage. See our Cookie Policy for details and controls.
Data Retention
We retain your business data for as long as your account is active. After account closure, data is retained for up to 90 days to allow reactivation and then permanently deleted, except where Indian law requires longer retention (e.g., financial records under tax law).
Data Sharing
We do not sell your data. We share data only with: (a) payment processors (Razorpay/Stripe) for billing, (b) email/SMS/WhatsApp providers you configure, (c) government systems you explicitly integrate (e-invoice, e-way bill), and (d) legal authorities when required by law.
Your Rights
- Access — request a copy of your data
- Correction — update inaccurate information
- Deletion — request deletion of your account and data
- Export — download your business data at any time
- Withdraw consent — for optional data processing
Data Security
We use TLS encryption in transit, encrypted storage, tenant-level data isolation, role-based access controls, and regular security reviews. See our Security Policy for details.
Grievance & Contact
For privacy questions or to exercise your rights, contact our Grievance Officer at privacy@invozeo.com. We respond within 30 days. See Grievance Redressal Policy for the escalation process.
Questions? Email support@invozeo.com or contact us.