Privacy Policy

This Privacy Policy explains how Biththi collects, uses, stores, and shares information when you visit the website, create an account, use the app, contact support, or interact with our emails and services.

By using Biththi, you agree to the collection and use of information described in this policy.

Account information: name, username, email address, password credentials in hashed form, role, organization membership, primary-admin status, phone number, address, and account activity details.

Organization information: organization name, organization type, organization details, public organization code, plan status, subscription metadata, settings, business details, GST registration details, business logo, signature image, bank account and UPI details shown on your documents, invoice and estimate preferences, metal rates and making-charge templates for jewellery businesses, and user management records.

Business records: estimates, invoices, customers, suppliers, items, stock levels and stock movements, expenses and purchase bills, payments received, credit notes, prices, tax fields such as GSTIN, PAN and place of supply, notes, terms and conditions, payment status, saved drafts, bill photos and PDFs you attach to expenses, files you import, exported document data, audit history, and related operational records you enter or generate.

Support and contact information: public contact form submissions, in-app support messages, contact numbers, email addresses, issue descriptions, screenshots or attachments you provide, and related support communication.

Authentication and security data: OTP requests, verification status, password reset requests, login events, failed login attempts, session records, mobile app sign-ins (including the device name the app reports and sign-in tokens, stored in hashed form), IP-related security metadata, timestamps, and audit logs.

Camera: with your permission, the camera is used to scan barcodes and to photograph bills. Barcodes are read on your device and the camera image is not uploaded. A bill photo is uploaded and stored only when you attach it to an expense or purchase bill.

Device and technical information: browser-provided request headers, cookies or local storage needed for sessions and preferences, theme preferences, and basic technical logs used to keep the service secure and reliable.

Usage, performance, and error information: aggregated page views and page-speed measurements, and, when something fails, error reports describing the failure. Error reports exclude cookies, authentication headers, and IP addresses, but may include business data that appears in an error message.

Operational metadata: we may collect usage counts, invoice counts, organization-level activity indicators, plan status, and similar service metrics to run, monitor, improve, and support Biththi.

We use information to create and manage accounts, authenticate users on the web and in the mobile app, send OTPs and verification emails, provide billing, purchase, inventory, and customer management features, save organization settings, support plan workflows, and operate the app.

We use business records to display, store, import, export, print, and manage estimates, invoices, payments, credit notes, customers, suppliers, expenses, items, stock, audit history, dashboard metrics, reports, and related app workflows requested by users.

We use usage, performance, and error information to find and fix problems, keep pages fast, and understand which parts of the service are used.

We use support information to investigate issues, respond to questions, troubleshoot bugs, improve reliability, and provide help to authorized users.

We use security and activity data to prevent abuse, rate-limit sensitive flows, detect suspicious activity, protect sessions, maintain audit history, and comply with legal or operational requirements.

Where applicable, we process information to provide the service you request, fulfill our contractual obligations, protect legitimate security and operational interests, comply with legal duties, and respond to user consent or direction.

You are responsible for ensuring you have the right to enter customer, employee, invoice, tax, and organization data into Biththi and for using the service in compliance with laws that apply to your business.

Biththi stores and processes data for convenience and workflow support. It should not be treated as your sole or final source of truth for legal, tax, accounting, financial, customer, or business records.

Biththi uses an essential cookie for web sign-in sessions. The mobile app keeps its sign-in tokens in the device's secure storage instead of a cookie.

Biththi uses browser local storage for preferences such as theme, sidebar layout, and whether setup tips are hidden. A service worker stores app files and icons on your device so Biththi can be installed and can show an offline page; it never stores your business data.

We measure page views and page speed with Vercel Web Analytics and Speed Insights. These do not use cookies and report aggregated information, such as the page visited, browser, device type, and country.

If we add marketing or other non-essential tracking technologies, we will update this policy and provide any required notices or choices.

We send transactional emails such as signup OTPs, verification links, password reset emails, welcome messages, plan notices, support responses, and user invitation emails.

Transactional emails are necessary for account security and service operation. You should not rely on email as the only copy of important business data.

We may use third-party providers for hosting, database infrastructure, email delivery, authentication, payment workflows, storage, security, error monitoring, analytics, and related operational services.

Our current providers are Vercel (hosting, web analytics, and performance measurement), Supabase (database), ZeptoMail (email delivery), and Sentry (error monitoring). Where enabled, Razorpay handles payments and Google handles sign-in with a Google account.

These providers may process information only as needed to provide their services to us. Their processing is also subject to their own terms, policies, and security practices.

We do not sell your personal information.

We may share information with service providers that help operate Biththi, with organization users according to their roles and permissions, with support personnel where needed to resolve issues, or when required by law, legal process, security obligations, or business transfers.

Information you enter into shared organization records may be visible to authorized users in the same organization according to app permissions.

We use reasonable technical and organizational measures designed to protect information, including hashed passwords, session controls, same-origin protections, access controls, rate limiting, audit logs, and database-backed persistence.

No online service can guarantee perfect security. You are responsible for protecting account credentials, limiting user access, reviewing authorized users, and promptly reporting suspected unauthorized access.

We retain account, organization, business records, attachments, settings, audit, and support information for as long as needed to provide the service, comply with legal obligations, resolve disputes, maintain security, or support business continuity.

Mobile app sign-ins expire after 60 days without use. Changing or resetting your password, or deactivating a user, signs out that user's devices.

Inactive users may remain in organization records for audit, security, and operational history. Some logs or backups may persist for a limited period even after deletion or account changes.

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing of personal information.

Primary admins can manage many organization and user details inside Biththi. For requests that cannot be completed in the app, contact support at support@biththi.com.

We may need to verify your identity and authority before fulfilling privacy or account requests, especially for organization-level data.

Biththi is intended for business and organization use. It is not intended for children, and users should not create accounts or submit personal information if they are not old enough to use the service under applicable law.

Your information may be processed in locations where we or our service providers operate. Data protection laws in those locations may differ from the laws where you live or operate your business.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date.

Continued use of Biththi after an updated policy is posted means you acknowledge the updated policy.

For privacy questions or requests, contact support at support@biththi.com.