Privacy Policy

Effective date: 1 January 2026 — Last updated: April 2026

Techtrio Automation ("we", "us", or "our") provides the Invoicify product and operates the Invoicify platform at invoicify.in. This Privacy Policy explains how we collect, use, store, and protect your personal information, and describes your rights under India's Digital Personal Data Protection (DPDP) Act, 2023.

Information We Collect

Account information: name, mobile number, and email address.
Business information: company name, registered address, GSTIN, PAN.
Financial data: invoices, expenses, payment records, and client details you enter.
Usage data: pages visited, features used, session duration, and device information.
Communications: support messages and feedback you send us.

How We Use Your Information

To provide, maintain, and improve the Invoicify platform.
To process payments and manage your subscription.
To send transactional notifications (invoice status, payment confirmations).
To send product updates and marketing communications (you can opt out at any time).
To comply with legal obligations including GST regulations and the DPDP Act.
To detect, prevent, and investigate fraud or security incidents.

Data Sharing

We do not sell your personal data to any third party. We share information only with: (i) payment processors (Razorpay) to facilitate transactions; (ii) cloud infrastructure providers (AWS) who store your data under strict data processing agreements; (iii) analytics providers on an anonymised, aggregated basis; and (iv) law enforcement agencies when legally required.

Data Security

All data is encrypted at rest using AES-256 and in transit using TLS 1.3.
Two-factor authentication is available and strongly recommended.
We perform daily automated backups retained for 30 days.
Access to production systems is restricted to authorised personnel only.
We conduct periodic security audits and penetration tests.

Your Rights Under the DPDP Act

Right to access: request a copy of your personal data.
Right to correction: correct inaccurate or incomplete data.
Right to erasure: request deletion of your account and data.
Right to portability: export your data in a machine-readable format.
Right to withdraw consent: opt out of marketing communications at any time.

Data Retention

We retain your account data for as long as your account is active. If you close your account, we delete your personal data within 90 days, except where we are required to retain it for legal or regulatory purposes (e.g., GST records must be retained for 8 years under Indian law).

Cookies

We use cookies to operate the platform and, with your consent, to analyse usage and serve relevant content. See our Cookie Policy for full details and instructions on managing your preferences.

Contact Our Privacy Team

To exercise your rights or for any privacy-related queries, contact us at [email protected]. We will respond within 30 days. For general enquiries, visit our Contact page.