Data Deletion Policy
InvoiceBhai Technologies Pvt Ltd · Effective date: 1 March 2026
1. Introduction
InvoiceBhai Technologies Pvt Ltd (CIN: U62099UP2026PTC245290), having its registered office at 1 Shivaji Marg, Hewett Road, Lucknow - 226018, Uttar Pradesh, India ("Company," "we," "us," "our"), respects your right to control your personal data. This Data Deletion Policy ("Policy") explains how you can request deletion of your data, what data is deleted, what data we are legally required to retain, and the timelines involved.
This Policy is issued in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and other applicable Indian laws. It should be read in conjunction with our Privacy Policy, Terms of Service, and DPDP Act Compliance Notice.
2. Your Right to Erasure
Under Section 12 of the DPDP Act, you have the right to request erasure of your personal data when:
- The personal data is no longer necessary for the purpose for which it was collected or processed.
- You have withdrawn your consent for processing, and there is no other legal basis for continued processing.
- You believe the personal data has been processed in violation of the DPDP Act.
This right is not absolute. The Company may retain certain data where required by law, as explained in Section 5 of this Policy.
3. Scope of Data Deletion
The following categories of data are subject to deletion upon a valid request:
3.1 Data That Will Be Deleted
| Data Category | Details |
|---|---|
| Account Profile | Your name, trade name, business address, email address, and WhatsApp number as registered with the Service. |
| Client/Customer Data | Names, addresses, GSTINs, and contact details of your clients stored within your InvoiceBhai account. |
| Usage Data | Interaction logs, feature usage patterns, session data, and behavioural analytics tied to your account. |
| Payment Credentials | Subscription preferences and payment method references (note: we do not store card numbers or UPI PINs; these are held by payment gateways). |
| Communication History | WhatsApp conversation logs and support tickets associated with your account. |
| Preferences and Settings | Invoice templates, numbering preferences, default tax rates, and other account configurations. |
3.2 Data That May Be Retained (Legal Obligations)
| Data Category | Retention Reason | Retention Period |
|---|---|---|
| Invoice Records | Section 35(5) of CGST Act, 2017 and Rule 56 of CGST Rules require maintenance of books of accounts and invoices | Minimum 6 years from the due date of filing Annual Return for the relevant financial year |
| Transaction Records | Income Tax Act, 1961 (Section 44AA) requires maintenance of books of accounts | Minimum 6 years from the end of the relevant assessment year |
| GSTIN and PAN | Required for audit trail and regulatory compliance under GST and Income Tax laws | Retained with invoice records as above |
| Payment Transaction Logs | Prevention of Money Laundering Act, 2002 and RBI guidelines on digital payments | Minimum 5 years from the date of transaction |
| Data Requested by Authorities | Court orders, regulatory investigations, or lawful government requests | As directed by the relevant authority |
Important: Where data must be retained for legal reasons, it will be archived securely with restricted access and will not be used for any purpose other than legal compliance. Once the mandatory retention period expires, this data will also be permanently deleted.
4. How to Request Data Deletion
You may request deletion of your data through any of the following channels:
- WhatsApp:Send a message to our official InvoiceBhai WhatsApp number with the text “Delete my data” or “Delete my account.”
- Email: Send a written request to help@invoicebhai.comwith the subject line “Data Deletion Request.”
- Phone: Call us at +91 63877 68346 during working hours (Monday to Friday, 10:00 AM to 6:00 PM IST).
When submitting a deletion request, please provide:
- Your registered WhatsApp number and name.
- Whether you want full account deletion or deletion of specific data categories.
- Any specific data you want retained (e.g., invoice copies for your own records — we recommend downloading these before requesting deletion).
5. Verification and Processing
To protect your data from unauthorised deletion requests, we follow a verification process:
| Step | Action | Timeline |
|---|---|---|
| 1 | Acknowledgement of request | Within 24 hours of receipt |
| 2 | Identity verification (OTP via WhatsApp or email confirmation) | Within 48 hours |
| 3 | Confirmation of scope (what will be deleted vs. retained) | Within 3 business days |
| 4 | User confirms deletion (final chance to download data) | User-dependent |
| 5 | Deletion executed | Within 15 days of user confirmation |
| 6 | Deletion confirmation sent to user | Within 24 hours of deletion |
Total processing time: Your data will be deleted within 30 days of the initial request, in compliance with the DPDP Act.
6. What Happens When Your Data Is Deleted
Upon successful deletion:
- Account Deactivation: Your InvoiceBhai account will be permanently deactivated. You will no longer be able to access the Service using your registered WhatsApp number.
- Invoice Access: You will lose access to all invoices stored in your account. We strongly recommend downloading all your invoices before requesting deletion.
- Subscription Cancellation: Any active subscription will be cancelled. No further charges will be applied. No refund will be issued for the remaining period of a prepaid subscription (as per our Refund and Cancellation Policy).
- Irreversibility: Once deletion is completed, it cannot be reversed. If you wish to use InvoiceBhai again, you will need to create a new account from scratch.
- Third-Party Data: We will instruct our data processors (cloud providers, analytics services) to delete your data from their systems. However, we cannot guarantee deletion timelines for third-party systems, though we will use reasonable efforts to ensure compliance within 30 days.
7. Automatic Data Deletion
In addition to user-initiated deletion, the Company automatically deletes data in the following circumstances:
- Account Inactivity: If your account remains inactive (no invoices generated, no logins, no subscription activity) for a continuous period of 24 months, we will notify you via WhatsApp and/or email. If no response is received within 30 days of notification, your account data will be scheduled for deletion.
- Post-Termination: When your account is terminated (whether by you or by the Company), your data will be retained for 90 days to allow for account recovery or dispute resolution. After 90 days, deletable data will be permanently removed.
- Expired Retention Periods: Data retained for legal compliance will be automatically deleted once the mandatory retention period expires.
8. Data Deletion Methods
We use the following methods to ensure secure and permanent deletion:
- Database Records: Permanent deletion from production databases with verification that records are not recoverable from backups after the next backup rotation cycle (typically within 30 days).
- File Storage: Secure deletion of stored files (invoice PDFs, uploaded documents) from cloud storage with confirmation of removal from all replicas.
- Backups: Deleted data will be purged from backup systems within 90 days of deletion from production systems, as backup rotation cycles complete.
- Anonymisation (Alternative): In some cases, instead of deletion, data may be irreversibly anonymised such that it can no longer be linked to you. Anonymised data is not personal data under the DPDP Act and may be retained for analytical purposes.
9. Exceptions and Limitations
The Company may refuse or delay a deletion request in the following circumstances:
- Where retention is required by applicable law (as detailed in Section 3.2).
- Where the data is necessary for the establishment, exercise, or defence of legal claims.
- Where there is an ongoing investigation, dispute, or legal proceeding involving the User.
- Where the request is manifestly unfounded, excessive, or repetitive (in which case we may charge a reasonable administrative fee).
- Where deletion would compromise the security or integrity of the Service for other users.
In any such case, we will inform you of the reason for refusal or delay and your right to file a complaint with the Data Protection Board of India.
11. Grievance and Escalation
If you are dissatisfied with our response to your data deletion request, you may contact our Grievance Officer, Husain Kazim, at help@invoicebhai.com or call +91 63877 68346. The Grievance Officer will review your complaint and respond within 15 days.
If the matter remains unresolved, you may file a complaint with the Data Protection Board of India (once constituted) under Section 13 of the DPDP Act. You may also refer to our Grievance Redressal Policy.
12. Changes to This Policy
We may update this Data Deletion Policy from time to time. Material changes will be communicated to you via WhatsApp or email at least 15 days before they take effect. The updated Policy will be available on our website.
13. Contact Us
For data deletion requests or questions about this Policy:
InvoiceBhai Technologies Pvt Ltd
Grievance Officer: Husain Kazim
Email: help@invoicebhai.com
Phone: +91 63877 68346
Address: 1 Shivaji Marg, Hewett Road, Lucknow - 226018, Uttar Pradesh, India