Privacy Policy
Last updated: 17 October 2026
Billing Babu (“Billing Babu”, “we”, “us”, “our”) is a brand of Hisaab AI (Udyam registration UDYAM-RJ-24-0106091), which provides GST billing, invoicing and accounting software for small businesses and their accountants in India. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have. By creating an account or using the app, you agree to this Policy. It should be read together with our Terms & Conditions.
01 Information we collect
Information you give us
- Account & contact details: your name, mobile number, and email address (used to create and secure your account and to sign in by OTP).
- Business details: business name, GSTIN, address, state, and logo, used to prepare your invoices and tax reports.
- Billing & accounting data: the invoices, sales, purchases, quotations, customers, suppliers, items/inventory, payments and GST data you create or upload in the app.
- Invoice scans: photos or files of invoices you choose to scan, which are processed to extract their text (OCR).
- Support communications: messages you send us.
Information collected automatically
- Device & technical data: device/browser type and app version, used only to run the service (not for analytics).
- Push token: a notification identifier, only if you enable notifications.
Payment information
Subscription payments are processed by our payment partner (Razorpay). Card, UPI and bank details are entered on the partner’s secure systems — we do not store your full card or bank account numbers.
02 How we use your information
- To create your account, sign you in, and operate the app.
- To generate invoices, reports, GST summaries and other documents you request.
- To process subscription payments and prevent fraud.
- To send service messages (e.g. invoice delivery on WhatsApp at your request, payment receipts, and notifications you enable).
- To provide customer support and respond to your requests.
- To maintain security, fix bugs, and improve the app.
- To meet legal, tax and accounting obligations.
We do not sell your personal information, and we do not use your business or financial data for advertising.
02A WhatsApp Offers from your own WhatsApp number
WhatsApp Offers is an optional add-on. It lets a business send offers to its own customers on WhatsApp, from the business’s own WhatsApp Business number and under its own name.
Connecting your WhatsApp Business account
When the business owner taps “Connect WhatsApp number”, a Meta window opens (Facebook Login for Business / WhatsApp Embedded Signup). You log in with Meta, choose or create your WhatsApp Business account and verify your number with Meta. Meta then gives us:
- your WhatsApp Business Account ID, phone number ID, display phone number, verified display name, name-approval status and quality rating; and
- a business access token that lets Billing Babu act on that one WhatsApp Business account.
To register a number that is new to WhatsApp, we also set a two-step verification PIN on it. The token and PIN are kept encrypted in a secure vault on our servers in India and are readable only by our server, never by the app on your device or by other businesses. We use them only to:
- register or connect the number you chose, and subscribe your WhatsApp Business account to our app, so that WhatsApp events for your number (incoming messages and delivery updates) are sent to our server;
- send the offers you choose to send, from your number;
- unsubscribe and, for a number registered through Billing Babu, release it from the WhatsApp Cloud API when you disconnect.
If you connect a number that already uses the WhatsApp Business app, Meta also shares that app’s contacts and chat history with us during setup. Billing Babu does not use your contacts, your chat history or your customers’ incoming messages for anything; our server does not process messages for numbers other than Billing Babu’s own. We never access WhatsApp Business accounts you did not connect, and we never change your payment method with Meta. You pay Meta directly for the messages your number sends.
Your customers’ phone numbers and consent
Offers are to be sent only to customers who agreed to receive them. When a customer says yes at the counter, the business ticks “Offers OK” on the bill, and we store that customer’s phone number and name, the date and time, who ticked it and the exact words shown to the business at that moment, as proof of consent. A customer marked as opted out is never sent offers. These records belong to the business; we process them on its behalf.
Checking offer text
Before an offer can be sent, its text (and your shop name) is checked by fixed rules and by an AI review on DeepSeek (China), to catch misleading or prohibited content. Only the offer text and shop name are sent for this check — never your customers’ numbers.
Disconnecting and deletion
The owner can disconnect at any time from the Marketing page on the Billing Babu website. We then unsubscribe our app from your WhatsApp Business account (unless another of your businesses on Billing Babu still uses the same account) and permanently delete the stored token and PIN. If you remove Billing Babu from your WhatsApp Business account inside Meta, Meta informs us and we delete the token and PIN. When a deleted Billing Babu account is purged (30 days after deletion), we also delete the token and PIN, and your customers’ phone numbers, consent records, campaign recipients and send records for WhatsApp Offers. See Delete your account and data.
03 Service providers we share data with
We share data only with trusted providers who process it on our behalf, under contract, to deliver the service:
| Provider | Purpose | Where processed |
|---|---|---|
| Supabase | Secure cloud hosting, database and authentication (where your data lives) | India (Mumbai) |
| Razorpay | Subscription payment processing | India |
| Meta / WhatsApp | Delivering invoices and messages you choose to send; connecting your own WhatsApp Business account and sending your offers from it | Global |
| Google (Gemini & Cloud Text-to-Speech) | Reading text from invoices you scan; voice read-aloud | United States |
| DeepSeek | Wording your “Ask your books” AI answers; fallback invoice reader; checking WhatsApp offer text before it is sent | China |
Cross-border data transfers
Your account and business records are stored in India (Mumbai) and are never uploaded in bulk to any overseas service. A small amount of data crosses borders only for optional AI features, and only when you actively use them:
- Invoice scanning: the single invoice image you scan is sent to our OCR provider — Google (United States), or DeepSeek (China) as a fallback — to read its text.
- “Ask your books”: your typed question and the general structure of your database are sent to DeepSeek (China) to build a query. The query then runs on our servers in India, and only the small, specific result of that one question is sent back to be worded into a sentence — never your full records.
- Voice / read-aloud: the text to be spoken is sent to Google (United States).
- WhatsApp Offers: the offer text and your shop name are sent to DeepSeek (China) to be checked before sending (see section 02A).
The AI help chat and voice assistant send only what you type, not your stored data. We send the minimum needed for each feature, and you can avoid these transfers entirely by not using scanning, the AI answer feature, or voice. These transfers are made under the providers' security and confidentiality commitments and in accordance with applicable Indian law.
We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety and security of our users and the public. If your accountant uses Billing Babu for CA Portal, data you authorise may be shared with them to prepare and file your returns.
04 Data storage & security
Your data is stored on secure cloud servers. We protect it with encryption in transit (HTTPS/TLS) and encryption at rest, access controls, and row-level security so that each business can only access its own data. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard safeguards.
Sign-in security
Billing Babu is passwordless. You sign in with a one-time password (OTP) sent to your WhatsApp or email, so there is no password to be guessed, reused, phished or leaked — each sign-in requires access to your own phone or inbox. Sign-in is additionally protected by automated bot-detection, and your session is cleared from the device when you sign out.
Cookies & trackers
Billing Babu does not use third-party advertising or analytics cookies, pixels or trackers. We use only essential local storage on your device to keep you signed in and to make the app work (for example, your active business, language preference and offline drafts). Signing out or clearing your browser storage removes this data from your device.
05 Data retention
We keep your account and business records for as long as your account is active and as long as needed to provide the service and to comply with legal, tax and accounting requirements (Indian tax law generally requires records to be retained for several years). When data is no longer required, we delete or anonymise it.
06 Your rights and choices
- Access & correction: view and edit your business and account details in the app, and download a full copy of your data at any time.
- Export: export your invoices and reports from the app.
- Deletion: request deletion of your account and associated personal data from within the app (Profile → Delete account) or by emailing us — subject to records we must retain by law.
- Notifications: turn push notifications on or off on your device.
- Withdraw consent: stop using the app and ask us to close your account.
To exercise any of these, email aihisaabkitaab@gmail.com. We will respond within a reasonable time.
07 Children
Billing Babu is a business tool intended for users aged 18 and over. It is not directed at children, and we do not knowingly collect personal information from anyone under 18.
08 Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you in the app. Continued use of the app after an update means you accept the revised Policy.
09 Contact us
For any privacy questions or requests, contact:
Billing Babu (a brand of Hisaab AI)
Email: aihisaabkitaab@gmail.com
10 Grievance Officer & registered address
In accordance with the Digital Personal Data Protection Act, 2023 and the Consumer Protection (E-Commerce) Rules, 2020, you may contact our Grievance Officer for any concern, complaint or request regarding your personal data or your use of Billing Babu:
Grievance Officer: Deepak Nagar
Entity: Hisaab AI (Udyam registration UDYAM-RJ-24-0106091), which owns the Billing Babu brand
Registered address: House No. 38, Block A, Shrinathpuram,
Kota, District Kota, Rajasthan – 324010, India
Email: aihisaabkitaab@gmail.com
Phone: +91 63604 08642
We will acknowledge your complaint within 48 hours of receipt and make our best effort to resolve it within 30 days.
© 2026 Billing Babu. All rights reserved.
Billing Babu is a brand of Hisaab AI.