Privacy Policy

Billbana is a free online billing and invoicing service operated by Intelliob Technologies (“Billbana”, “we”, “us”). We are based in Mumbai, India.

This policy explains what information we collect when you use Billbana, why we collect it, how long we keep it and what you can ask us to do with it. It is written to describe what the service actually does, rather than to reserve rights we do not use.

For any privacy question or request, write to us at info@intelliob.com.

Billbana handles two kinds of personal information, and the difference matters because your rights and ours differ between them.

• Your account information. The details you give us to have a Billbana account and a business profile. We decide how this is handled, and this policy governs it.
• The information you enter about your customers. Names, addresses, phone numbers, email addresses and GSTINs of the people and businesses you invoice. This is your business record. You decide what to enter and why; we store and process it on your behalf so the service can produce your invoices. We do not use it for our own purposes.

Because your customers’ information is yours, you are responsible for having a proper basis to collect and use it, and for answering any request one of your customers makes about it. If a customer of yours approaches us directly, we will point them to you.

Giving us your email address and a password is unavoidable: without them there is no account. Everything marked optional above can be left blank, and the service still works — though an invoice with no GSTIN on it is an invoice with no GSTIN on it.

To be specific, because these are the common assumptions:

• We do not run analytics or tracking. Billbana has no Google Analytics, no product analytics, no session recording, no heatmaps and no advertising pixels. We do not build a profile of you, and we do not track you across other websites.
• We do not sell, rent or share your data with anyone for marketing, advertising or any similar purpose.
• We do not read your invoices for our own purposes. Your billing data is not used to train models, to build market research, or for anything other than providing the service to you.
• We do not take payment details. Billbana is free and has no payment gateway. We never ask for card or net-banking credentials. If anything claiming to be Billbana asks you for these, it is not us.
• We do not send marketing you did not ask for. Every marketing channel is off by default.

• Only if you opt in. We send marketing email about Intelliob Technologies products and offers only if you have chosen to receive it — with the unticked box when you sign up, or under Settings → Account → Product updates and offers. We do not send marketing by SMS, WhatsApp or phone.
• Separate from the Terms. Agreeing to receive marketing is a separate choice from accepting our Terms of Use. You can use Billbana fully without it.
• Withdraw at any time, in Settings or with the unsubscribe link in any marketing email. One click is enough; you do not need to sign in.
• We keep a record of when and how you gave your consent, which wording you agreed to, and when you withdrew it, so we can show that we respected your choice.
• Your business data is not used for marketing. We do not use your invoices, estimates, customers, items or business details to decide what to send you or to whom.
• We never share your email address with third parties for their own marketing.
• Service emails are not marketing. Emails we must send to run your account — address verification, password reset and security notices — are sent whatever your marketing choice, and they carry no promotion.

Billbana sets one cookie, and it is essential: a session cookie named billbana_session that keeps you signed in. It cannot be read by scripts in your browser, it is sent only over HTTPS in production, and it expires after five days.

There are no analytics cookies, no advertising cookies and no third-party cookies. That is also why Billbana shows no cookie consent banner — there is nothing optional to consent to.

The full detail, including the browser storage used by the offline mode and the sign-in process, is in our Cookie Policy.

Billbana is built on a small number of infrastructure services. These are the only third parties involved, and each acts on our instructions to run the service — none of them receives your data for its own marketing purposes.

We may also disclose information where the law requires it — for example in response to a valid order from a court or an authorised government agency — or where it is necessary to establish or defend a legal claim.

Where your information is stored. Your information is stored and processed outside India, in these locations:

By using Billbana you consent to this transfer. If these locations change materially, we will update this policy.

The measures actually in place include:

• Your password is held by Google Firebase Authentication. Billbana’s own database never stores it.
• You must verify your email address before an account can be used at all.
• The session cookie is HTTP-only, restricted to HTTPS in production, and limited to Billbana’s own site.
• Every request for your data is verified on our servers and scoped to your business before any record is read, so one account cannot reach another’s records.
• Traffic is encrypted with HTTPS, and our providers encrypt stored data.
• Our logs are written so that passwords, tokens, session cookies and similar values are removed before anything is recorded.

More detail is on our Security page. We hold no security certification and do not claim one. No online service can promise perfect security, and we do not.

We keep your account and business data for as long as your account exists, because your invoices are records you may need for years — Indian tax law requires many businesses to retain such records for several years, and it is not our place to delete them for you.

When you delete your account (Settings → Account → Your data → Delete my account), we immediately remove your account, your business data, your logo and signature, and your sign-in credentials from our live systems. Copies may persist briefly in our providers’ routine backups before those are overwritten in the ordinary cycle. We may retain the minimum necessary to meet a legal obligation or to resolve a dispute.

Download your data before you delete your account. Deletion cannot be undone, and we cannot restore a deleted account. Keeping copies of your invoices for as long as the law requires is your responsibility.

You can, at any time:

• See and correct your information — your business profile, customers, products and invoices are all editable in the application itself.
• Change your marketing preference, or withdraw consent you gave earlier — see Marketing communications.
• Download a copy of your data — Settings → Account → Your data → Download my data gives you a ZIP of spreadsheet files with your account, business profile, customers, products, invoices and invoice lines.
• Delete your account and all of its data — Settings → Account → Your data → Delete my account. It takes effect immediately.
• Ask us about how we handle your information, or for anything the application cannot do for you, by writing to info@intelliob.com.
• Complain if you are unhappy with how we have handled your information — see the grievance officer details below.

Once the relevant provisions of the Digital Personal Data Protection Act, 2023 are in force, you will also have the rights it gives a data principal: to obtain a summary of the personal data we process about you, to have it corrected, completed, updated or erased, to have your grievances redressed, and to nominate another person to exercise these rights if you die or become incapable. The tools above already cover most of them.

India’s Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 are being brought into force in stages. The substantive obligations — notice, consent, security safeguards, breach reporting, retention, erasure, the rights of data principals and grievance redressal — take effect on 13 May 2027.

Until then, the operative framework is the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, which require us to publish a policy of this kind and to maintain reasonable security practices.

We have written this policy and built the practices described in it to the standard the DPDP framework sets, in advance of those provisions commencing. We are not claiming to be certified as compliant with any law, and nobody can honestly claim compliance with obligations that have not yet come into force. We will update this policy as the remaining provisions take effect.

We have not appointed a Data Protection Officer, and Billbana is not designated as a Significant Data Fiduciary. If either changes, we will say so here and give you the contact details.

Billbana is a tool for running a business and is not intended for children. You must be old enough to enter into a contract under Indian law — 18 years — to hold an account. We do not knowingly collect information from children. If you believe a child has created an account, tell us at info@intelliob.com and we will remove it.

For any question, request or complaint about privacy, write to info@intelliob.com. For help using the application, write to support@intelliob.com.

Grievance officer. Complaints about how we handle personal information, or about the service, may be addressed to our grievance officer:

• Grievance Officer, Intelliob Technologies
• Email: info@intelliob.com

We aim to acknowledge a complaint within a few working days and to resolve it as quickly as we reasonably can, and in any case within the time the law requires. If you are not satisfied with our response, you may escalate the matter to the Data Protection Board of India once the applicable provisions of the Digital Personal Data Protection framework are in force.

See our Contact page for all the ways to reach us.

We will update this policy when the service changes or when the law requires it. The date at the top always shows when the current version took effect. If we make a change that materially affects how we handle your information, we will take reasonable steps to bring it to your attention rather than relying on you to re-read the page.