Privacy Policy
Effective 5 October 2026This policy explains what information the DIGRENO Invoice app (“the app”) collects, why, and the choices you have. The app is operated by DigReno, North Garden City, Mira Road (E), Thane - 401107, Maharashtra, India (“DIGRENO”, “we”, “us”). We process personal data in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
1. Information stored only on your phone
Invoices, drafts, customer and product lists, your business logo, bank and UPI details and your app PIN are saved in the app’s private storage on your device. We do not upload them. If you turn on Android backup for your Google account, Android may copy app data to your Google account under Google’s terms.
2. Information we collect on our servers
| What | Why |
|---|---|
| Mobile number | To log you in with a one-time password (OTP) and identify your account. |
| Business name, GSTIN and email (if you give it) | To set up your account, contact you about it, and give the free trial only once per business. |
| Device details: model, Android version, app version, an app installation ID and a one-way hash of the device identifier | To keep you signed in on your devices, prevent misuse of the free trial, and tell you when an update is required. |
| Push notification token | To send reminders and service messages you can switch off in Android settings. |
| Credit history | To keep your credit balance correct across devices and reinstalls. Each entry records the time and number of credits, not the contents of your invoice. |
| Payment records: order ID, payment ID, amount, status | To add purchased credits, handle refunds and meet tax and accounting law. We never see or store your card number, UPI PIN or bank login. |
| Support tickets and messages | To answer your questions. The app may attach your app version and device model to help us diagnose problems. |
3. Service providers we share data with
We share only what each provider needs to do its job:
- Razorpay processes payments for credit packs.
- Meta (WhatsApp Business Platform) or an SMS provider delivers your login OTP to your mobile number.
- Google provides Firebase Cloud Messaging for notifications and Play Integrity to detect tampered apps.
- Our cloud hosting provider runs the servers and database that store the data in section 2.
We do not sell your personal data and we do not use it for advertising. We may disclose data when the law requires it.
4. How long we keep data
We keep account data while your account is active. When you delete your account we remove your login and profile. Payment and tax records are kept for as long as Indian tax and accounting law requires, currently up to 8 years. OTP records expire within minutes.
5. Security
All traffic between the app and our servers is encrypted with HTTPS. OTPs are stored only as one-way hashes. Access to our systems is limited to staff who need it, and staff actions are logged.
6. Your rights
You can ask to see, correct or erase the personal data we hold about you, and withdraw consent by deleting your account. You can delete your account in the app under Settings → Account → Delete account, or follow the steps on our account deletion page. To use any other right, write to us at the address below.
7. Children
The app is meant for businesses and is not directed at anyone under 18.
8. Changes to this policy
We will post any change on this page and update the date above. If a change is significant, we will also tell you in the app.
9. Grievance Officer
If you have a concern about how your data is handled, contact our Grievance Officer:
Pankaj Pawar
North Garden City, Mira Road (E), Thane - 401107, Maharashtra, India
Email: [email protected]
We acknowledge complaints within 24 hours and aim to resolve them within 15 days.