Privacy Policy

Information We Collect

• Account information from Google Sign-In — your name and email address.
• Business profile details you enter — business name, address, GSTIN, Drug License number and expiry, FSSAI number, and bank details used on your invoices.
• Invoicing data you create or upload — customers, suppliers, products, bills, purchase records and related documents.
• Payment confirmations from PhonePe (transaction ID, amount, plan, status). We never receive or store your card, UPI ID, or net-banking credentials — those are handled entirely by PhonePe.
• Basic usage and device logs (e.g. sign-in timestamps, error logs) for reliability and support.

How We Use Your Information

• To provide the core service — generating invoices, bills of supply and reports.
• To prepare GST reports (GSTR-1, GSTR-3B, GSTR-2A reconciliation and similar) from your billing data.
• To respond to support requests and send important service notices (billing, security, policy updates).
• To detect and prevent abuse, and to keep the service secure and reliable.

Storage & Security

Data is transmitted over encrypted (HTTPS) connections. We use technical and organizational measures designed to protect customer data, including authenticated access controls and logical separation between customer accounts. Access to production data is restricted to personnel who need it to operate the service, for support, maintenance, security or legal compliance.

Sharing & Disclosure

We do not sell your data. We share information only with:

• Other trusted service providers that help us operate the service (such as hosting, file storage and email delivery).
• PhonePe, to process subscription payments.
• Google, to authenticate your sign-in.
• Authorities, if disclosure is required by law or a valid legal process.

Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and data by writing to pharmoice@gmail.com. Deletion is carried out on verified requests — it is not automatic — and we may retain certain records where the law requires it, for example Indian GST rules require certain tax documents to be preserved for a minimum period. We recommend exporting any records you need before requesting deletion.

Your Rights

You can ask us to access, correct, export or delete your personal and business data, or withdraw consent where our processing relies on it, by writing to pharmoice@gmail.com. We will respond within a reasonable time. See our Contact page for our grievance process.

Cookies

We use cookies required for sign-in and session management (via our authentication provider). We do not currently use third-party advertising or analytics cookies. Third-party providers we integrate for sign-in (Google) and payments (PhonePe) may set their own cookies, governed by their own privacy policies.

Governing Framework

This policy is governed by the Indian Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023. For grievances relating to your personal data, contact our Grievance Officer, [Grievance officer name], at pharmoice@gmail.com.

Changes to This Policy

We may update this policy from time to time. We will revise the “Last updated” date above when we do, and for material changes we will notify you in-app or by email.

Contact Us

Questions about this policy? Write to pharmoice@gmail.com.