Privacy Policy
Last updated: Draft — pending founder approval
Dukaaan is billing software for Indian small businesses. This policy explains what we store, why, and how you get it back or have it deleted. It is written to meet the Digital Personal Data Protection Act, 2023 (DPDP).
Who we are
Dukaaan is operated from India. For DPDP purposes we act as a Data Fiduciary for your account details, and as a Data Processor for the customer and supplier records you enter into your books.
What we collect
Account details you give us: your name, email address and/or phone number, and your business name and GSTIN. Business data you enter: customers, suppliers, products, invoices, payments, expenses and stock. Technical logs: request timestamps, routes, response times and error traces, identified by account and business IDs only — never by name, phone number or invoice value.
Why we use it
To run the service you signed up for: creating and storing your invoices, computing GST, showing what your customers owe you, and producing your exports and reports. We do not sell your data, we do not use it to train models, and we do not show advertising.
Where it lives
All data is stored in Google Cloud's Mumbai region (asia-south1) and does not leave India. It is encrypted in transit and at rest. Backups are taken daily and are held in the same region.
Payments
We never see or store card, UPI or bank credentials. Payments you record in Dukaaan are just entries in your books, not money movement.
How long we keep it
For as long as your account is active. Finalized invoices and the accounting entries behind them cannot be edited or deleted, because GST law requires them to be retained — corrections happen through credit notes.
Your rights
You can export everything you have entered, at any time, as CSV and JSON, from Settings → Privacy and data. You can ask us to delete your account from the same screen; we act on it within 30 days, except for records we are legally required to retain. You can also ask us to correct your account details, or complain to the Data Protection Board of India.
Sharing
We share data only with the infrastructure providers that run the service (Google Cloud, for hosting, storage and sign-in). We disclose data to authorities only where the law requires it.
Contact
Questions about your data, or a deletion request that has not been actioned: contact the founder through the Help link inside the app.
Did this answer it?
If it did not, write to the person who built Dukaaan. You get a reply from someone who can change the product, not a ticket number.
shubhukalra@gmail.com