Techtrio Automation (“we”, “us”) provides the Invoicify product and operates the platform at invoicify.in. This policy explains how we collect, use, store, and protect your personal information.
Information we collect
- Account information: name, mobile number, and email address.
- Business information: company name, registered address, GSTIN, PAN.
- Financial data: invoices, expenses, payment records, and client details you enter.
- Usage data: pages visited, features used, session duration, device information.
- Communications: support messages and feedback you send us.
How we use your information
- To provide, maintain, and improve the Invoicify platform.
- To process payments and manage your subscription.
- To send transactional notifications (invoice status, payment confirmations).
- To send product updates and marketing communications — you can opt out at any time.
- To comply with legal obligations including GST regulations and the DPDP Act.
- To detect, prevent, and investigate fraud or security incidents.
Data sharing
We do not sell your personal data to any third party. We share information only with: (i) payment processors (Razorpay) to facilitate transactions; (ii) cloud infrastructure providers (MongoDB Atlas, Cloudflare R2) who store your data under strict data-processing agreements; (iii) analytics providers on an anonymised, aggregated basis; and (iv) law-enforcement agencies when legally required.
Data security
- All data is encrypted at rest using AES-256 and in transit using TLS 1.3.
- Per-tenant database isolation — your organization gets its own MongoDB DB, not a row in a shared table.
- Two-factor authentication and WebAuthn passkeys are available and strongly recommended.
- We perform daily automated backups retained for 30 days.
- Access to production systems is restricted to authorised personnel only.
Your rights under the DPDP Act
- Right to access — request a copy of your personal data.
- Right to correction — fix inaccurate or incomplete data.
- Right to erasure — request deletion of your account and data.
- Right to portability — export your data in a machine-readable format.
- Right to withdraw consent — opt out of marketing communications at any time.
Data retention
We retain your account data for as long as your account is active. If you close your account, we delete your personal data within 90 days, except where we are required to retain it for legal or regulatory purposes (GST records must be retained for 8 years under Indian law).
Cookies
We use cookies to operate the platform and, with your consent, to analyse usage and serve relevant content. See our Cookie policy for details and instructions on managing your preferences.
Contact our privacy team
To exercise your rights or for any privacy-related queries, contact us at [email protected]. We respond within 30 days. For general enquiries, visit our contact page.