Privacy Policy

1. Information we collect

Account and sign-in information

When you create or access an account, we may receive:

• your name and email address;
• an account identifier and authentication tokens;
• your profile image, if your sign-in provider makes one available; and
• your chosen sign-in method and basic account settings.

If you use Google Sign-In, InvoBill requests only the basic identity information needed to create and secure your account, such as your name, email address and profile information made available through the scopes shown on Google’s consent screen. If you use Sign in with Apple, Apple may provide your name, email address or an Apple private relay address, depending on your choices. We do not receive your Google or Apple password.

Business and transaction information

Information you enter into InvoBill may include:

• business names, addresses, GSTINs, tax settings and financial-year settings;
• customer and supplier details;
• products, services, inventory, prices and stock movements;
• invoices, quotations, orders, credit or debit notes, payments, ledgers and accounting entries;
• GST, HSN/SAC, e-Invoice and reporting information;
• staff accounts, roles and permissions; and
• files, logos, notes and other content you choose to add.

Some of this information may contain personal data relating to your customers, suppliers, employees or other people. You are responsible for having a lawful basis and giving any notices required before entering their information into InvoBill.

Device, usage and diagnostic information

We may collect technical information needed to operate and protect the service, such as device and browser type, IP address, approximate region derived from IP, app version, timestamps, sign-in events, network status, feature interactions, crash reports, error logs and security events. We do not use this information to read unrelated content from your device.

Support communications

If you contact us, we collect your contact details, message and any files or account information you choose to provide so we can answer and investigate the issue.

2. Local and online processing

InvoBill is designed to be offline-first. Core app data may be stored in your browser or device so you can continue working when your connection is unavailable. Clearing browser storage, deleting the app, changing devices or using private-browsing mode may remove locally stored information unless it has been backed up or synchronized.

Some functions require an internet connection. Account authentication, synchronization or backup, support, security checks, e-Invoice or GST connections, and other connected features may send the information needed for that function to Ozevon and its service providers. The interface will identify optional connected features where appropriate.

3. AI-assisted features

InvoBill offers optional AI-assisted features: describing an invoice in plain words, scanning a bill for an expense, and, in Beta, AI Copilot, which answers questions about your own business records. They are available only when your account has AI features enabled, and they run only when you choose to use them.

When you use one, the information you submit is sent online for processing: for invoice entry, the text you type; for bill scanning, the bill image or PDF you select, including any business, customer, supplier and transaction information it contains. This is sent through our server-side service to Anthropic’s Claude, which returns draft fields. InvoBill does not save the text or the scanned bill as part of using these features; the draft only fills in the form on your screen.

Anthropic does not use API inputs to train its models by default. See Anthropic’s explanation of model training and API data.

AI Copilot (Beta). AI Copilot is a read-only Beta feature that lets you ask questions in plain language about your company’s own invoices, sales, receivables, customers and output GST. It is switched off by default. It becomes available to a company only after Ozevon grants that company Beta access and an owner or administrator of the company turns it on after reading a data notice. Either step can be withdrawn at any time: Ozevon can remove Beta access, and your company’s owner or administrator can turn Copilot off. It is also available only on subscription plans that include it.

When you ask Copilot a question, the question you type and the business figures needed to answer it, such as sales totals, amounts owed, customer names and invoice details, are sent online through our server-side service to Anthropic’s Claude. Copilot looks up only what the question needs, within the permissions you already have in InvoBill, and only for the company you are using. Anthropic does not use API inputs to train its models by default, as described above.

Copilot only reads. It does not create, edit, send or delete invoices or any other record, and it does not take actions on your behalf. Your conversation with Copilot is kept in your browser’s memory only: InvoBill does not save it, and it is cleared when you press Clear or close the page. Questions about input tax credit and net GST payable are not supported yet, and Copilot will decline them.

We log how many questions each company asks, so that we can apply usage limits and keep an audit record of Copilot settings and access. Question counts are logged; the text of your questions and answers is not saved as part of this log.

Copilot answers are generated by AI and may be incomplete or wrong. Check important figures against your reports before relying on them. Avoid submitting unrelated sensitive information.

AI results are drafts. Review names, items, amounts and tax details before saving — nothing is saved until you press Save. These features require an internet connection. Avoid submitting unrelated sensitive information.

4. How we use information

We use information to:

• create, authenticate and secure your account;
• provide invoicing, inventory, accounting, reporting and related features;
• save your settings and, when enabled, synchronize or back up data;
• process requests to connected services that you choose to use;
• provide support and service messages;
• detect, prevent and investigate fraud, abuse, security incidents and technical failures;
• understand and improve reliability, accessibility and performance; and
• comply with law, enforce our terms and protect the rights and safety of users, Ozevon and others.

We do not sell your personal information. We do not use Google user data or Apple sign-in data for advertising. We do not transfer Google user data to advertising platforms, data brokers or information resellers.

5. Google API data

InvoBill’s use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements.

We use Google sign-in data only to authenticate you, create or link your InvoBill account, display basic account information and protect the service. We do not use Google user data for advertising, credit decisions or unrelated profiling. We share it only with service providers acting for us as needed to provide or secure InvoBill, when you direct us to, or when required by law.

You can revoke InvoBill’s Google access from your Google Account permissions. Revoking access stops future access through that authorization, but does not automatically delete information already retained for legitimate account, security or legal purposes. To request deletion, see Section 9.

6. When we share information

We may share information:

• With service providers: hosting, authentication, database, storage, email, diagnostics, security and customer-support providers that process information for us under appropriate restrictions.
• At your direction: when you export, send or share an invoice or report, invite a team member, enable synchronization, or connect a government, tax, payment or other third-party service.
• For legal and safety reasons: when reasonably necessary to comply with law or legal process, respond to lawful requests, protect rights and safety, prevent fraud or abuse, or enforce our terms.
• For a business transfer: as part of a merger, financing, acquisition, reorganization or sale of assets, subject to appropriate notice and safeguards required by law.

We do not make your business records public unless you choose to share them.

7. Third-party services

Google, Apple and any tax, payment or other service you connect process information under their own terms and privacy policies. When you use an AI-assisted feature, Anthropic processes the submitted text, bill, or Copilot question and the business figures sent with it, to return draft invoice or expense fields or an answer; see Anthropic’s privacy policy. InvoBill may link to third-party sites. We are not responsible for their independent practices.

8. Retention and security

We retain information only for as long as needed to provide the service, meet the purposes in this policy, comply with law, resolve disputes and enforce agreements. Retention periods vary by the type of information and whether it is stored locally, synchronized or required for security and legal records.

We take reasonable steps to protect your data. No storage or transmission method is completely secure, and we cannot guarantee absolute security. Keep your device, browser, account credentials and recovery methods secure, and maintain exports or backups appropriate for your business.

9. Your choices and rights

Depending on applicable law, you may ask to access, correct, export or delete personal information associated with your account, object to or restrict some processing, or withdraw consent where processing relies on consent. You may also:

• update account and business information in InvoBill;
• export or delete locally stored records using available app controls;
• revoke Google access in your Google Account;
• stop using Sign in with Apple or manage Apple relay settings through your Apple account; and
• contact us about account deletion or a privacy request.

Send requests to support@invobill.net from the email associated with your account. We may need to verify your identity. We may retain limited information where required for security, fraud prevention, accounting, legal compliance or dispute resolution. Deleting your account does not delete copies that other users lawfully hold, such as invoices you sent them.

10. Children's privacy

InvoBill is intended for businesses and is not directed to children under 18. We do not knowingly collect personal information from children for their own use of the service. Contact us if you believe a child has provided personal information without appropriate authorization.

11. International processing

Ozevon and its service providers may process information in countries other than the one where you live. We take reasonable steps to protect your data. By using connected services, you understand that processing may occur outside India or your home country, subject to applicable law.

12. Changes to this policy

We may update this policy as InvoBill changes. We will post the revised policy here and update the “Last updated” date. If a change materially affects how we use information, we will provide additional notice where required.

13. Contact

For privacy, account-deletion or support questions:

Ozevon — InvoBill
Email: support@invobill.net