This Privacy Policy explains how Indexial Technologies handles information in connection with the InvexBook web application and related services ("InvexBook" or the "Service"). InvexBook is a cloud-based business-management platform for billing, inventory, purchase/sales and accounting used by businesses ("your Business") and their authorized users. This policy covers both the personal data we handle to operate InvexBook and the business data that a Business enters into the Service.
1. Who controls your data
- Business data you enter (your customers, vendors, items, invoices, stock, ledgers and transactions): your Business is the controller of this data, and we act as a processor handling it on the Business's behalf and instructions. If you are a customer, vendor or staff member of a Business that uses InvexBook, please direct requests about that data to the Business.
- Account and service data (registration details, login and billing information, and usage/diagnostic data): we act as a controller to the extent needed to provide, secure, bill for and improve the Service.
Questions about your Business's use of InvexBook should go to your Administrator; questions about the app or this policy can be sent to invexbook@gmail.com.
2. Information we collect
- Account & profile: business/organization name, Administrator and user names, work email and phone, role, and organization/tenant identifiers — used for sign-in, role-based access, support and reporting.
- Business & transactional data you enter: customer and vendor details (which may include names, contact details, addresses, GSTIN/tax identifiers), item and inventory records, invoices, orders, challans, credit/debit notes, payments and receipts, ledgers and vouchers, and related notes and documents.
- Billing information: (if paid) plan, subscription and payment records. Where payments are collected, card/bank details are handled by our payment provider; we do not store full payment-instrument numbers.
- Usage & diagnostics: app version, browser/device type, IP address, log and event data, and error/diagnostic information — used to operate, secure and improve the Service.
- Cookies & local storage: we use strictly necessary cookies and browser storage to keep you signed in, maintain your session securely, and remember basic preferences. Authentication tokens are stored in secure, HTTP-only cookies. We do not use advertising cookies.
3. How we use information
We use information to: provide, operate, maintain and secure the Service; authenticate users and enforce role-based access; process the transactions and generate the documents and reports you request; provide customer support; (if paid) manage subscriptions and billing; monitor, troubleshoot and improve performance and reliability; detect, prevent and address fraud, abuse or security issues; and comply with legal obligations. We do not sell your information and do not use it for advertising.
4. Legal bases (where applicable)
Where required, we process personal data on the bases of: performance of a contract (providing the Service you or your Business requested); our legitimate interests in operating, securing and improving the Service; consent, where we ask for it; and compliance with legal obligations.
5. Sharing
We share information only as needed to run the Service or as required by law:
- With your Business (as controller) and the users it authorizes.
- Service providers / sub-processors that host and operate the Service under contract — for example, cloud hosting and infrastructure, and email/SMS delivery. These providers are permitted to use the data only to provide services to us.
- Authorities or third parties where required by law, legal process, or to protect rights, safety and the integrity of the Service.
- Business transfers: if we are involved in a merger, acquisition or asset sale, information may be transferred subject to this policy.
We do not sell personal data.
6. Where your data is hosted
The Service is hosted on secure third-party cloud infrastructure (Microsoft Azure, Central India region). Data is processed within India; where any processing occurs elsewhere, we apply appropriate contractual and technical safeguards.
7. Security
We use technical and organizational measures appropriate to the risk, including encryption of data in transit (HTTPS/TLS), role- and tenant-based access controls that isolate each Business's data, secure authentication, and restricted internal access on a need-to-know basis. No method of transmission or storage is completely secure; we cannot guarantee absolute security, and you are responsible for safeguarding your credentials.
8. Data retention
We retain personal and business data for as long as your Business's account is active and as needed to provide the Service, and thereafter as required to comply with legal, tax, accounting or reporting obligations, resolve disputes and enforce agreements. On termination, we make data available for export for a reasonable period, after which it is deleted or anonymized in the ordinary course, unless a longer retention is required by law or agreed in your service agreement.
9. Your rights
Subject to applicable law (including the Digital Personal Data Protection Act, 2023), you may have rights to access, correct, update, or request deletion of your personal data, to withdraw consent, and to raise a grievance. Because your Business controls the data it enters, please make such requests through your Administrator where the request concerns Business data; for account or app-related requests you may contact invexbook@gmail.com. We will respond in accordance with applicable law.
10. Children
InvexBook is a business application, is not directed to children, and is not intended for anyone under 18. We do not knowingly collect personal data directly from children.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be posted here with a new effective date and, where appropriate, notified to you. Please review it periodically.
12. Contact
Indexial Technologies, B-56 Surya Vihar, Gurugram, Haryana 122001, India. Email: invexbook@gmail.com. Website: https://www.invexbook.com.