Privacy Policy

1. Who we are

This Privacy Policy explains how RemnowBill (operated as Remsuite) (“we”, “us”) collects, uses, stores, and shares personal and business data when you use our website and billing software. We process data as a service provider for your business workspace and as a data fiduciary for your account information, consistent with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable Indian law.

2. Data we collect

Depending on how you use RemnowBill, we may collect:

• Account data: name, email address, hashed password, Google account identifiers if you sign in with Google, and authentication tokens.
• Business profile: business name, GSTIN, address, state code, PIN code, bank details, logo, invoice prefixes, and signature block.
• Operational data: customers, items, invoices, quotations, challans, payments, notes, GST e-invoice/e-way bill responses, and reports you generate.
• Billing data: subscription status, trial dates, Razorpay payment identifiers, and invoices we issue to you for the product.
• Technical data: IP address, device/browser type, timestamps, and security logs needed to operate and protect the service.

3. How we use data

We use this data to create and secure your account, provide invoicing and GST features, send OTPs and transactional email (registration, password reset, invoice delivery), process subscriptions, prevent fraud, debug incidents, and comply with law. We do not sell your personal data.

GST-related processing (e-invoice, e-way bill, GSTIN lookup) is performed only when you enable those features and is sent to authorised GSP/NIC endpoints as required to complete the request you initiate.

4. Legal bases and consent

We process account and workspace data to perform the contract in the Terms of Service, to meet legal obligations (for example tax invoicing of our own subscriptions), and for legitimate security interests. Where consent is required (for example optional marketing), we will ask separately. You may withdraw consent for optional processing without affecting service that is strictly necessary to run your account.

5. Sharing

We share data only as needed to run RemnowBill. That includes infrastructure and email providers that host the app or send transactional mail; Razorpay (or a successor processor) for subscription and customer payment links you enable; GST Suvidha Providers / NIC when you generate e-invoices or e-way bills or look up a GSTIN; and authorities if required by law, court order, or to protect rights and safety.

We require processors to protect data and use it only on our instructions. Tenant workspaces are isolated; other customers cannot access your records through normal product use.

6. Cookies and similar technologies

We use essential cookies and local storage (for example JWT access/refresh tokens) to keep you signed in and to protect sessions. We do not use advertising cookies. You can clear site data in your browser, but you will need to sign in again.

7. Retention

We keep account and workspace data while your account is active. After deletion or long inactivity we retain data only as long as needed for backups, dispute handling, tax records for our own subscription invoices, and legal requirements, then delete or anonymise it. OTP codes are short-lived (typically 10 minutes) and stored only as hashes.

8. Security

We use HTTPS, hashed passwords, hashed OTPs, JWT session tokens, and tenant-scoped queries. No method of transmission or storage is completely secure. Please use a strong unique password and protect your email inbox, because password-reset codes are sent there.

9. Your rights

Subject to the DPDP Act and other applicable law, you may request access, correction, or erasure of personal data we hold about you, and you may withdraw consent for optional processing. Workspace owners can update most business data inside Settings. To exercise rights or raise a grievance, email support@remnowbill.com. We may need to verify your identity before acting.

10. Children

RemnowBill is a business product and is not directed at children under 18. We do not knowingly collect personal data from children.

11. International processing

Primary operations are intended for users in India. Infrastructure providers may process data in other regions. Where that happens, we take reasonable steps to keep protection comparable to Indian requirements.

12. Changes

We may update this Policy. The “Last updated” date at the top will change. Material changes will be highlighted in the product or by email where appropriate. Continued use after an update constitutes acceptance of the revised Policy.