Privacy Policy

• For your account details (the people who sign up and log in) and for website visitors and leads, we are the Data Fiduciary: we decide how that data is used.
• For data your business enters about its parties, drivers, truck owners and staff, your business is the Data Fiduciary and we are its Data Processor. We handle that data only to provide the service to you.

Our free tools on getbilty.in keep the details you type in your own browser. They are not sent to us unless you submit a form, such as asking for email reminders.

• Account data: name, mobile number, email, password (stored only as an argon2id hash), company name, address, GSTIN, PAN, UPI ID and logo.
• Operational data you enter: parties, consignors and consignees, trucks and their documents, drivers (name, phone, licence, and Aadhaar if you choose to upload it), loads, bilties, invoices, payments, TDS, expenses and notes.
• Billing data: plan, invoices, and payment status and reference from our payment gateway. We do not receive full card numbers or UPI PINs.
• Contact and lead data: name, email, phone, city and message when you fill a form, book a demo or ask for reminders.
• Chat data: if you use the live chat on our website, the messages you send and any name or email you give are stored by our chat provider, Brevo.
• Usage and device data: IP address, browser, pages viewed, approximate location from IP, and in-app events such as "bilty printed" or "bilty shared", used to run, secure and improve the service.
• Share link data: when someone opens a bilty or invoice link you shared, we count the view and record its time.

We do not sell personal data, and we do not use your operational records for advertising.

• To provide the service: store your records, generate bilties, invoices and statements, and show your reports.
• To create and secure your account, verify your email, and detect misuse.
• To bill your subscription and keep tax and accounting records.
• To send service messages: password resets, invoices, renewal and trial reminders, and document-expiry alerts you have turned on.
• To help you get started: onboarding tips and follow-up by email. You can opt out at any time by replying to the email or writing to [email protected].
• To answer your questions by email and live chat.
• To understand which features are used, so we can improve them. We use aggregated data for this.

We process account and billing data to perform our contract with you and to meet legal obligations such as GST and income-tax record-keeping. We process lead and marketing data on the basis of your consent, which you can withdraw at any time. Operational data is processed on the instructions of your business.

• Users in your workspace, only for the parts their role permissions allow. Data belonging to one business is never visible to another.
• People you send a share link to. They see only that document (for example a bilty, without your truck hire or margin) until you revoke the link or it expires.
• Our service providers, listed on the Sub-processors page, each receiving only what they need.
• Our support staff, only when you ask for help or when needed to keep the service secure. Support access to a workspace is logged.
• Government authorities, when Indian law requires us to disclose data.

The Bilty app and its database are hosted in India. Some providers, such as our email and analytics providers, may process limited data outside India. Any such transfer follows the DPDP Act and the restrictions notified under it.

Your business is responsible for keeping its own GST records for the period the law requires. Export them before you close your account.

• Workspace data: while your account is active. After you close the account or a trial lapses without a plan, we keep it for 90 days so you can return or export it, then delete it from live systems. Copies in backups are overwritten on their normal cycle.
• Our own billing records and invoices: for the period required by GST and income-tax law (currently up to 8 years).
• Leads who did not sign up: up to 24 months after our last contact, or sooner if you ask us to delete them.
• Security logs: up to 12 months.

Write to [email protected] from your registered email. We will reply within 30 days. If your request is about data your transporter or broker entered about you (for example as a driver or party), we will pass it to that business, which decides on it.

• Access a summary of the personal data we hold about you and how it is used.
• Correct or update inaccurate or incomplete data.
• Erase data that is no longer needed, unless the law requires us to keep it.
• Withdraw consent for marketing messages at any time.
• Nominate another person to exercise your rights if you die or become incapable.
• Raise a grievance with our Grievance Officer, and then with the Data Protection Board of India.

Bilty is a business tool and is not meant for anyone under 18. We do not knowingly collect children’s personal data.

We protect data with encryption in transit, argon2id password hashing, short-lived sessions with rotating refresh tokens, strict separation between businesses, role-based permissions and audit logs. See the Security page for details. If a personal data breach affects you, we will inform you and the Data Protection Board as the law requires.

We use a small number of cookies to keep you signed in, remember your language and measure how the website is used. The Cookie Policy lists them.

If we change this policy in a way that matters, we will tell you by email or in the app before the change applies. The date at the top shows the latest version.

Privacy questions: [email protected]. Grievance Officer: [email protected], Jaipur, Rajasthan, India. See the Grievance Officer page for timelines.