Privacy Policy

Last Updated: July 15, 2026. Learn how we collect, process, and protect your business data at Khatago.

At Khatago, we are committed to safeguarding the privacy of our users. This Privacy Policy describes how we collect, use, store, and process your personal and business data when you use the Khatago GST invoicing and inventory platform (the "Service"). This policy is designed to comply with India’s Information Technology Act, 2000, and the Digital Personal Data Protection (DPDP) Act, 2023.

To provide our GST invoicing and inventory management service, we collect the following types of information:

• Account Details: Your name, business email, contact phone number, and account credentials.
• Business Metadata: Registered business name, GSTIN (GST identification number), PAN, official billing address, state code, bank account details (bank name, account number, IFSC), and business logo.
• User-Inputted Client & Vendor Data: Names, contact details, GSTINs, addresses, and transaction history of your clients, customers, and vendors.
• Transaction & Inventory Records: Invoices generated, bills, expenses, item inventory quantities, stock details, and transaction histories created inside the app.
• Payment & Card Data: When you purchase subscriptions to our paid tiers, payments are processed securely via our payment gateway partner, Razorpay. Khatago does not collect or store credit/debit card numbers, CVVs, or UPI PINs. All such payment transactions are governed by Razorpay's own privacy rules.
• Technical & Analytics Data: IP address, browser type, device information, and interaction history on our website (via basic cookies for user session management).

We process your information based on your consent and to fulfill our service delivery obligations. Specifically, we use your data to:

• Auto-populate, generate, and store valid GST invoices, quotes, and reports.
• Enable sharing of invoices with your clients via WhatsApp, email, or client portals.
• Track inventory levels, calculate tax balances, and display dynamic financial analytics.
• Process payments and manage plan subscriptions through Razorpay.
• Send email updates, receipts, system alerts, and provide responsive customer support.
• Optimize platform performance and prevent fraud or illegal invoicing activity.

We do not sell, rent, or trade your personal or business data to third parties. We share information only with trusted service providers essential for running the Service:

• Payment Aggregators (Razorpay): To securely collect payment fees.
• Hosting and Cloud Databases (Supabase / Vercel): To store user profiles, inventory, client details, and transaction data securely in the cloud.
• Government Bodies: Only when legally required to comply with court orders, tax investigations, or applicable regulatory audits.

Khatago implements rigorous technical security standards, including SSL/TLS encryption for all data in transit, secure database authentication protocols, and access logs. Our databases are hosted on enterprise-grade secure servers. While we take every reasonable precaution, no online system is 100% secure, and we advise users to keep their account passwords confidential.

You hold complete control over your business data at Khatago:

• Data Export: You can download a complete backup of all your data (invoices, clients, inventory, expenses) in structured Excel format using the "Create Local Backup" tool on the dashboard at any time.
• Data Deletion: You can request complete deletion of your account and all associated records by contacting support. Upon closure, your data is permanently deleted from our databases within 30 days, except where law requires longer retention for tax/accounting audits.

If you have any questions, grievances, or requests regarding this Privacy Policy or your data, you can reach out to our designated Grievance Officer under India’s Information Technology rules: