Privacy Policy

Last updated: October 2026

BizKhata is operated by Hybrid Computer and Electronics, Ground Floor, Seth Complex, Russell Chowk, Jabalpur, Madhya Pradesh – 482001, India. BizKhata is a business management app (Android app and web app). Your business data (invoices, inventory, customers, khata) is stored on your device first. When you are signed in with Google, a copy is synced to BizKhata's servers so you can use the web app and other devices. This policy describes what we collect when you use the app, web app, website and cloud account features that are actually implemented.

Data we process

  • Local app data: Business records you enter are saved on your device (phone, or the browser for the web app). Demo Mode and local accounts that are not signed in with Google never upload business data.
  • Cloud sync & web app (signed-in accounts): When you sign in with Google, BizKhata stores a synced copy of your business records on our servers, linked only to your account: business profile (name, address, GSTIN, logo), invoice settings (numbering, terms, invoice design, signature image), customers, suppliers, products and services, invoices, purchases, quotations, delivery challans, proforma invoices, purchase orders, credit/debit notes, payments, expenses, other income, staff list, stock movements, reminder settings, and your UPI ID / payee name / default email used on documents. We also keep a sync log per device (device ID, platform, app version, last sync time) and a record of edit conflicts so nothing is silently lost. Not synced: your app PIN and app-lock setting, theme and other device settings, notifications, license tokens, and any payment-gateway secret key or Firebase settings you enter.
  • How the cloud copy is protected: data travels only over HTTPS and is accessible only through your signed-in BizKhata account. It is not end-to-end encrypted: it is stored on BizKhata servers in a form our systems can read, and our team accesses it only to operate the service, to fix a problem you report, or when required by law. The server database is backed up daily and daily backups are kept for 14 days.
  • Your controls: in the app or web app go to Settings → Cloud Sync to see sync status, download the cloud copy (JSON file), or delete the cloud copy. Deleting removes your synced records from the live database immediately (it keeps working offline on your device); copies in daily backups expire within 14 days. Signing out of the web app removes the business data from that browser.
  • Cloud account (Google Sign-In): When you sign in with Google we store your name, email address, Google account identifier and profile photo URL, the business name and optional mobile number you provide, and your license status. We also keep sign-in session records (device ID, device name, platform, app/OS version, IP address and timestamps) to secure your account and enforce device limits. We never receive your Google password.
  • License & devices: For paid licenses we store the license ID, status, purchase and payment references, and for each activated device a random app-generated device identifier, the device name, Android version and BizKhata app version, and activation / last-check timestamps. This is used to enforce the device limit and to issue signed license tokens. We do not collect IMEI or phone numbers for this.
  • Payments: Card/UPI details are handled by Razorpay. We store order/payment IDs, amounts and license activation metadata — not card numbers or UPI PINs.
  • Support tickets: Name, email, mobile, category and messages you submit (from the website or the app), plus our replies.
  • Optional business summary (off by default): Only if you switch on “Share business summary with BizKhata support” in the app (Settings → Privacy), the app sends a few totals during its online license check: total sales, total purchases, receivable, payable, product count, stock value, invoice count, date of the last transaction and last backup, and app version. No customer names, invoices, item lists or other detailed records are sent. It helps our team support you. Turn it off at any time and the stored summary is deleted from our server at the next online check.
  • Analytics: Privacy-friendly page/event counters (e.g. visit, apk_download) without unnecessary PII.
  • Ads (Free plan and Demo Mode only): Google AdMob may use advertising ID and limited device data per Google's policies. You can request non-personalized ads in Settings. Ads are not loaded on devices with an active, verified Business License.

What we do not do

  • We do not sell your personal data.
  • We do not delete your local business data when a license is cancelled, refunded or revoked, or a subscription expires.
  • We do not claim end-to-end encryption: cloud sync is encrypted in transit (HTTPS) but not end-to-end encrypted.
  • We do not use your synced business records (customers, invoices, items) for advertising or share them with advertisers.

Contact / data controller

BizKhata (operated by Hybrid Computer and Electronics)
Ground Floor, Seth Complex, Russell Chowk, Jabalpur, Madhya Pradesh – 482001, India
Phone: +91 8109621492 / +91 8085300860 (WhatsApp +91 8109621492)
Email: [email protected]