Privacy Policy

Last updated: 25 September 2026

GST Bill Maker is a product of Tanvi Fintech Private Limited (“Tanvi Fintech”, “we”, “us”). This policy explains what personal data we collect through gstbillmaker.in — the free invoice generators and the free GST Bill Maker account (together, the “Service”) — why we collect it, how long we keep it and how you can exercise your rights. It is written in line with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025.

1. Who we are

Tanvi Fintech Private Limited (CIN U62011TS2026PTC221542), registered office at Plot No. 11, Sy. No. 11/31, Flat No. 101, Ram Meadows, Madhapur, Shaikpet, Hyderabad – 500081, Telangana. For the personal data you give us about yourself, we are the Data Fiduciary. Section 4 explains our role for data you enter about your customers and suppliers.

2. Data we collect and why

  • Generators used without an account — the details you type into an invoice generator are processed in your browser to produce the PDF. They are not stored on our servers unless you are signed in.
  • Your account — name, email address, login details (or your Google account name and email if you sign in with Google), and your settings. Used to create and secure your account and give you support.
  • Your business data — your business profile (name, GSTIN, address, logo, signature, bank and UPI details), and the invoices, quotations, receipts, parties, items, stock, purchases and expenses you record. Stored so the Service can work for you.
  • Team members — the name and email of anyone you invite to your business account, and the rights you give them.
  • GSTIN autofill — when you ask us to fetch details for a GSTIN, we look it up through a third-party GSTIN information service and show you the public registration details it returns.
  • Sending invoices and ledgers — when you choose to email or WhatsApp an invoice or ledger, we use the recipient details you give us only to send it.
  • Contact form, email and chat assistant — your name, email and message, and anything you type into the chat assistant on the site. Used to reply to you.
  • Browsing and security — pages visited, device and browser type, approximate location and referring website (through cookies), and IP address and request details in server logs. Used to understand how the site is used, keep it secure and fix problems.

We use personal data on the basis of your consent — given when you create an account, submit a form or write to us — or where the law otherwise permits. We do not sell your personal data, and we never use your business data for advertising.

3. Signing in with Google

If you choose “Continue with Google”, Google shares your name, email address and profile picture with us so that we can create your account. We do not receive your Google password.

4. Data about your customers, suppliers and staff

When you record data about other people — for example your customers, suppliers or team members — you decide why and how that data is processed. We process it on your behalf and on your instructions, only to provide the Service to you, and we do not use it for any purpose of our own. You are responsible for having a lawful basis to use that data and for giving those people any notice the law requires.

5. Cookies, analytics and advertising

Essential cookies keep you signed in and remember your preferences. Analytics: we use Google Analytics to see, in aggregate, which pages are read and how visitors reach the site; it sets cookies in your browser.

Advertising. We may show advertisements on gstbillmaker.in served by Google. Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet. You may opt out of personalised advertising by visiting Google’s Ads Settings. You can also opt out of some third-party vendors’ use of cookies for personalised advertising at www.aboutads.info. Where the law requires consent before such cookies are used — for example for visitors from the European Economic Area, the United Kingdom and Switzerland — we will ask for it first.

6. Who we share it with

We share personal data only with the following, and only as needed for the purposes above:

  • Hostinger — website hosting, databases and email delivery.
  • Google — sign-in with Google, website analytics, the chat assistant (which uses Google’s Gemini service to answer your questions), storage of backups, and ad serving where advertising is shown.
  • GSTIN information service — the GSTIN you ask us to look up.
  • People you send documents to — when you email or share an invoice or ledger, it goes to the recipient you choose.
  • Systems you connect — where you ask us to connect your account to another system you use, we share the data needed for that connection.

We may also disclose personal data where the law requires it, for example in response to a lawful request from a government authority or court.

7. Where it is stored

Your data is stored on the servers of the providers listed above, which may be in India or in other countries. Any transfer outside India is made only as permitted under the Digital Personal Data Protection Act, 2023.

8. How long we keep it

  • Account and business data: while your account is active. After you close your account, or ask us to delete it, we delete the data; backup copies are overwritten in the normal backup cycle. You should download any invoices you need to keep for your own records first.
  • Contact and chat messages: as long as needed to reply and follow up, and not more than three years after our last exchange with you.
  • Server and security logs: for a limited period for security, and then deleted.

We keep data longer only where a law requires it.

9. How we protect it

The Service is served only over encrypted connections (HTTPS), account data is access-controlled, access by our team is limited to what is needed to run and support the Service, and our providers apply their own security safeguards. No system is completely secure, but if a personal data breach affects you, we will inform you and the Data Protection Board of India as the law requires.

10. Your rights

Under the Digital Personal Data Protection Act, 2023 you have the right to:

  • obtain a summary of the personal data we hold about you and how we use it;
  • have it corrected, completed or updated, and have it erased;
  • withdraw your consent at any time — as easily as you gave it;
  • have your grievances addressed by us; and
  • nominate another person to exercise these rights if you die or become incapable.

To use any of these rights, write to info@gstbillmaker.in with “Privacy” in the subject line. We may ask you to confirm your identity before acting. Withdrawing consent does not affect anything we did with your data before you withdrew it.

11. Questions and complaints

Privacy contact: Tirumalesh Malla, Tanvi Fintech Private Limited
Email: info@gstbillmaker.in (subject: “Privacy”)
Post: Plot No. 11, Sy. No. 11/31, Flat No. 101, Ram Meadows, Madhapur, Shaikpet, Hyderabad – 500081, Telangana

We will respond to your complaint as soon as possible and in any case within 90 days. If you are not satisfied with our response, you may then complain to the Data Protection Board of India.

12. Children

The Service is meant for businesses, professionals and adults and is not directed at children. We do not knowingly collect personal data of anyone under 18. If you believe a child has given us personal data, please write to us and we will delete it.

13. Changes to this policy

We may update this policy when the Service or the law changes. The date at the top shows when it was last updated. If a change affects how we use data you have already given us, we will tell you before it takes effect.

See also our Terms of Use and Refund & Disclaimer.

Scroll to Top