Privacy Policy

1. Two kinds of data

Account data is information about you as our customer: your name, email address, password (stored only in hashed form), your business details and logo, and how you sign in.

Business data is what you put into the service: your customers' names, addresses, emails and tax numbers, your items, invoices, quotes, payments, expenses and similar records. For this data you decide what is collected and why; we process it only on your instructions to provide the service.

2. What we collect automatically

Basic technical records such as IP address, browser type, pages requested and timestamps, kept by our hosting providers for security and troubleshooting. We use only the cookies needed to keep you signed in. We do not use advertising cookies.

3. How we use data

To provide and secure the service, send the emails you ask us to send, answer support requests, bill you, and meet legal obligations. We do not sell personal data and we do not use your business data for advertising.

4. Who we share it with

We use a small number of service providers who process data for us: Supabase (database, sign-in and file storage), Vercel (website hosting), Resend (sending email), and Google (only if you choose to sign in with Google).

If you connect a payment gateway such as Razorpay, the details needed to take a payment (such as amount, invoice number and your customer's contact details) are passed to that gateway. Card and bank details are entered on the gateway's own form and never reach our systems.

We may disclose data where the law requires it.

5. Where data is stored

Data is stored on our providers' servers, which may be located outside India. We choose providers that commit to appropriate safeguards.

6. Security

Data is encrypted in transit. Each business's records are separated from every other business's by database-level access rules. Payment gateway secret keys are stored encrypted. No system is perfectly secure; if a breach affects your data we will notify you as the law requires.

7. How long we keep it

We keep account and business data while your account is active. After closure we delete or anonymise it within a reasonable period, unless the law (for example tax law) requires us to keep certain records for longer.

8. Your rights

You can see and correct your account details in the app, export your business data, and ask us to delete your account. You may also have rights under the Digital Personal Data Protection Act, 2023, including the right to withdraw consent and to raise a grievance. To use any of these, email hello@pikziystudio.com.

If you are a customer of a business that uses our service and want to see or correct your details on their invoices, please contact that business first; we will help them respond.

9. Children

The service is for businesses and is not intended for anyone under 18.

10. Changes

We may update this policy. We will post the new version here and, for significant changes, tell you by email or in the app.

11. Contact and grievances

PikZiy Studio, Baner Road, Pune 411045, Maharashtra, India. Email: hello@pikziystudio.com.