Our complete compliance statement under the Digital Personal Data Protection Act, 2023 (India).
BillSathi (बिलसाथी)
Bhopal, Madhya Pradesh, India
support@billsathi.in
We are a Data Fiduciary as defined under DPDPA 2023 §2(i), we determine the purpose and means of processing your personal data.
We process your personal data on the following bases under DPDPA 2023 §4:
We use DPDPA Option D consent, notice embedded in the first interaction:
"mera account delete karo" on WhatsApp.We engage a small number of Data Processors under DPDPA 2023 §2(k), each under a written contract requiring DPDPA-equivalent protections as §8(2) requires. We disclose them by the role they perform. The Act requires you to be told the purpose, the safeguards and how to exercise your rights — it does not require a vendor list, and publishing one would tell our competitors how BillSathi is built.
Carries every message between you and BillSathi. This is Meta’s platform and Meta’s own terms govern the chat itself.
Receives the contents of what you send — voice, photo or text — so it can become a document.
Runs the service and stores your finished PDFs and your uploads.
Takes payment if you upgrade. Card and UPI details go to them and never reach us.
No processor may sell your data, use it for its own advertising, or pass it to another business. Neither may we. Your documents and your customer list are never shared, never sold, and never used to sell anything to your customers.
Some processors operate servers outside India. DPDPA 2023 §16 permits this except to countries the Central Government restricts by notification, and every processor is contractually bound to DPDPA-equivalent protections.
Enterprise buyers and auditors who need the specific vendors under a confidentiality undertaking can request the list from our DPO at support@billsathi.in.
| Data type | Window | How removed |
|---|---|---|
| Voice notes | 30 days | Auto-deleted |
| Photos | 30 days | Auto-deleted |
| Document PDFs | Permanent | While account active |
| Business profile + GSTIN + logo | Permanent | While account active |
| Signature + seal (Business) | Permanent | While account active |
| Conversation logs | 90 days | Auto-pruned |
| Security event logs | 1 year | Auto-deleted |
Send "mera data dikhao" on WhatsApp. Structured export within 7 business days.
Use /profile commands on WhatsApp to update profile data.
Send "mera account delete karo". 2-step confirm. Deletion within 24 hours. Irreversible.
DPO: Saransh Sharma · support@billsathi.in · +91 85912 63807. Response within 72 hours.
You may nominate another individual to exercise your rights in the event of your death or incapacity. Contact our DPO to register a nominee.
Email support@billsathi.in with subject "Grievance: [your issue]". DPO responds within 72 hours.
Escalate to the Data Protection Board of India. meity.gov.in (placeholder until official Board URL is published).
BillSathi is a business tool intended for adults operating registered or unregistered businesses. We do not knowingly collect data from individuals under 18 years of age.
Material changes will be communicated via WhatsApp before the effective date. The version history is maintained below.