Privacy Policy

We collect three categories of information:

Account information you give us — your name, email address, business name, GSTIN, PAN, business address, phone number, and password. We need this to create your workspace and let you log in.

Business data you create in GlassBuddy — customer records, quotes, invoices, payments, line items, attachments, and similar operational data you enter or upload. This is your data. We store it on your behalf so you can use the product.

Usage data we collect automatically — your IP address, browser type, pages visited, features used, and timestamps. We use this to keep the service secure, fix bugs, and understand which features are valuable.

• To provide the GlassBuddy service to you and your team.
• To send you transactional emails (account verification, password resets, payment receipts, invoice reminders you configured).
• To respond to your support requests and product questions.
• To improve the product (analyse aggregated, anonymous usage patterns).
• To detect, prevent, and respond to fraud, abuse, or security incidents.
• To comply with our legal obligations under Indian law (e.g. maintaining tax records, responding to lawful requests).

We do not sell your personal information. We do not use your business data to train AI models. We do not show you ads.

We share information only in these limited cases:

• Service providers who help us run GlassBuddy — cloud hosting (AWS, Vercel), database hosting, email delivery (Resend), SMS delivery (MSG91), payment processing (Razorpay). These providers process data only on our instructions and under strict contracts.
• Tally / Zoho Books / accounting integrations — only if you explicitly connect your account, and only the specific records you authorize.
• Legal compliance — if required by law, court order, or to protect rights and safety.
• Business transfers — if GlassBuddy is acquired or merges, your data may transfer to the new owner. We will notify you and your rights will continue.

Your data is stored on servers operated by our infrastructure providers, primarily located in India (Mumbai region). Some services we use (analytics, error monitoring) may process limited metadata in regions outside India. We use industry standard encryption for data in transit (TLS) and at rest (AES 256).

We keep your account data for as long as your workspace is active. If you cancel, we keep your data for 30 days in case you change your mind, then permanently delete it. You can request earlier deletion at any time.

Some records (like invoices, GST data) we may need to keep longer to comply with Indian tax law (typically 8 years). We will retain only what is legally required and isolate it from active use.

Under the Digital Personal Data Protection Act, 2023 (DPDPA), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Erase your personal data (subject to legal exceptions).
• Withdraw consent for processing where applicable.
• Nominate someone to exercise these rights on your behalf.
• Lodge a complaint with the Data Protection Board of India.

To exercise any of these rights, email us at privacy@glassbuddy.in and we will respond within 30 days.

We use a small number of cookies, all functional or strictly necessary — to keep you logged in, remember your preferences, and keep the service secure. We do not use advertising cookies or third-party tracking cookies.

GlassBuddy is for businesses, not children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by a prominent in-product notice at least 30 days before they take effect.

For any privacy questions or to exercise your rights:

Email: privacy@glassbuddy.in
Mailing address: GlassBuddy Software Pvt Ltd, Pune, Maharashtra, India