1. Who we are
SahiInvoice is operated by SahiInvoice, a sole proprietorship registered in India, at Sarjapur Road, Bengaluru, Karnataka 560001, India. We are the Data Fiduciary for the personal data described in this policy, as that term is used in India's Digital Personal Data Protection Act, 2023 (“DPDP Act”). You are the Data Principal.
This policy covers SahiInvoice's website, the signed-in workspace, and the read-only portal you can share with your Chartered Accountant. Questions go to support@sahiinvoice.com; unresolved complaints go to our Grievance Officer, whose details are in section 11.
2. What we collect
We collect only what the product needs to produce a GST-compliant export invoice and a filing-ready return. We do not buy personal data from anyone, and we never ask for your GST portal or banking passwords.
| Category | Specific data | Where it comes from |
|---|---|---|
| Identity and account | Name, email address and profile picture returned by Google Sign-In; your account identifier | Google, when you choose to sign in |
| Business profile | Legal and trade name, GSTIN, PAN, business address, phone, and the bank name, account number and IFSC printed on your invoices | Entered by you in Settings |
| Financial records | Payout rows imported from platform CSVs — client or payer name, amount, currency, FX rate, receipt and bank credit dates, platform reference — plus the invoices, LUT records and GSTR exports generated from them | CSV files you upload, and documents the app generates |
| Third-party contacts | The email address of any Chartered Accountant you invite, and comments they leave | Entered by you when creating a CA invitation |
| Technical and security | IP address, request metadata, session cookies, rate-limit counters, and a log of which compliance reminder emails were sent to you | Collected automatically when you use the service |
| Billing | Plan, subscription status and payment reference. Card and UPI details are handled by Razorpay and never reach our servers | You, and our payment processor |
Sensitive financial identifiers
PAN, GSTIN and bank account details are held because GST law requires them on an export invoice — not for any other purpose. They are never used for marketing, never shared with advertisers, and are erased when you delete your account.
3. Why we use it, and our legal basis
The DPDP Act requires that personal data be processed only for the specific purpose you consented to. Each purpose below is separate; we do not repurpose data collected for one row to serve another.
| Purpose | Data used | Basis |
|---|---|---|
| Create and secure your account | Identity and account data, session cookies | Consent, given when you sign in |
| Generate export invoices and GSTR-1 / GSTR-3B files | Business profile, financial records | Consent, and performance of our agreement with you |
| Run compliance checks (LUT expiry, ₹20 lakh threshold, missing proof) and email you reminders | Financial records, email address | Consent — withdrawable at any time in Settings without losing any other feature |
| Share a read-only view with your Chartered Accountant | Financial records, CA email address | Your explicit instruction each time you create an invitation |
| Bill you and account for our own taxes | Identity, billing records | Consent, and our statutory obligations under Indian tax law |
| Prevent abuse, debug faults and keep the service available | Technical and security data | Legitimate use under the DPDP Act |
What we never do: we do not sell personal data, we do not share it with advertisers or data brokers, we do not use your financial records to train machine-learning models, and we do not profile you for automated decisions that produce legal effects.
4. Consent and withdrawing it
By signing in you consent to the processing described in section 3. That consent is free, specific, informed and unconditional, and it is limited to the purposes listed — this notice is the “notice” required by section 5 of the DPDP Act, available in English and on request in any language in the Eighth Schedule of the Constitution.
- Compliance emails — turn off in Settings → Email notifications. The rest of the product keeps working.
- CA access — revoke any invitation from Workspace → CA Access. The link stops working immediately, and every link expires on its own after 30 days.
- Everything else — withdrawing consent for account and invoice processing means we can no longer provide the service, so it takes effect as an account deletion (section 9).
Withdrawal is as easy as giving consent and does not affect processing that already happened lawfully before you withdrew.
6. Where your data lives
Application requests execute in Vercel's Mumbai region and your records sit in our Supabase Postgres database. Some processors listed in section 5 — notably Google Sign-In and our email provider — operate outside India, so limited data (your email address, the content of a notification) is processed abroad. These transfers are permitted under section 16 of the DPDP Act, which allows transfer to any country the Central Government has not restricted.
7. How long we keep it
We erase personal data once the purpose it was collected for is served and no law requires us to keep it. Here is the schedule we apply.
| Data | Retention | Why |
|---|---|---|
| Account and profile data (name, email, GSTIN, PAN, address) | For as long as the account is open, then erased within 30 days of deletion | Needed to operate the account and to print a compliant invoice header. |
| Bank details recorded on your profile | For as long as the account is open, then erased within 30 days of deletion | Printed on export invoices so foreign clients can remit payment. |
| Transactions, export invoices, LUT records and GSTR exports | For as long as the account is open, then erased within 30 days of deletion | You remain responsible for retaining these for 6 years under GST law — export them before you delete your account. |
| Our own invoices and payment records for your subscription | 6 years (72 months) from the end of the relevant financial year | Statutory retention under the CGST Act 2017 and the Income-tax Act 1961 for our own books. |
| CA portal invitations and access logs | Until revoked or expired (30 days), then erased with the account | Security auditability of who was given read access to your data. |
| Compliance email log (which alert was sent, and when) | For as long as the account is open, then erased with the account | Prevents the same reminder being emailed to you repeatedly. |
| Server and security logs (IP address, request metadata) | Up to 90 days | Abuse detection, rate limiting and incident investigation. |
Export your records before you delete your account
Section 36 of the CGST Act 2017 requires you to retain your books, invoices and proof of export for 72 months (6 years) from the due date of the annual return for that financial year. We are not your record-keeper of last resort — when you delete your account we erase your data, and it cannot be recovered. Download the full export from Settings first.
8. How we protect it
- Traffic is served over HTTPS only.
- Every database query is scoped to your account identifier, with PostgreSQL row-level security enforcing the same boundary a second time.
- CA portal links carry a 256-bit token that is stored only as a SHA-256 hash, expires after 30 days, is revocable, and is rate limited.
- Administrative database credentials are used only by server-side code paths that have no user session by design, never in the browser.
- Uploads are size-, type- and row-capped so a malicious file cannot exhaust the service.
No system is perfectly secure. If a personal data breach affects you we will notify you and the Data Protection Board of India as required by section 8(6) of the DPDP Act, describing what happened and what you should do.
9. Your rights as a Data Principal
Chapter III of the DPDP Act gives you the following rights, and we honour all of them.
- Access — a summary of the personal data we process and who we have shared it with. Available instantly as a machine-readable download from Settings → Your data, without having to ask us.
- Correction and completion — edit your business profile at any time in Settings. Email support@sahiinvoice.com for anything you cannot edit yourself.
- Erasure — delete your account and all associated records from Settings → Your data, or by writing to support@sahiinvoice.com. See section 9.
- Grievance redressal — escalate to our Grievance Officer (section 11) before approaching the Data Protection Board.
- Nomination — nominate someone to exercise these rights on your behalf in the event of your death or incapacity. Write to support@sahiinvoice.com and we will record it.
We respond to any request within 30 days. We may ask you to sign in to prove the request is genuinely yours; we will not ask you for identity documents we do not already hold.
10. Deleting your account
Go to Settings → Your data and choose Delete account. You will be asked to type your email address to confirm. When you do:
- Your sign-in credentials, business profile, transactions, invoices, LUT records, CA invitations and comments, filing statuses and notification history are deleted immediately.
- Any active CA portal link stops working at once.
- Residual copies in encrypted database backups are overwritten as those backups rotate, within 30 days.
- We retain only our own invoices to you and the associated payment records, for the statutory period in section 7, because tax law requires it.
Deletion is immediate and irreversible. Export your data first.
12. Grievance Officer and escalation
If you are unhappy with how we have handled your personal data or a request under section 8, contact our Grievance Officer, appointed under section 13 of the DPDP Act:
Grievance Officer, SahiInvoice
SahiInvoice
Sarjapur Road, Bengaluru, Karnataka 560001, India
Email: support@sahiinvoice.com
We acknowledge every grievance within 48 hours and aim to resolve it within 30 days. If you are still not satisfied, you may complain to the Data Protection Board of India under section 27 of the DPDP Act. Full contact details are on our contact page.