Legal

Privacy policy

Last updated 15 October 2026

This policy explains what information Inventory Management Software ("we", "us") collects when a shop uses Bintree — the website, the web app and the mobile app — why we collect it, and what you can do about it. We have tried to keep it short and plain. If anything is unclear, contact us using the details at the end.

1. Two kinds of data, two roles

Bintree holds two kinds of personal data, and our role is different for each:

Your account data — the details of the shop owner and staff who sign in. For this data we decide how it is used, so we are responsible for it.
Your customers' and suppliers' data — the names, phone numbers and khata (credit) entries a shop records about the people it does business with. The shop decides what to record and why. We store and process it only to run Bintree for that shop, and only on the shop's instructions.

2. What we collect

Account details: name, mobile number, email address, password (stored only in hashed form) and role.
Business details: business name, address, GSTIN, business type, logo and settings.
Business records: products, stock, prices, sales, invoices, purchases, expenses, payments, cash and bank entries, and accounting reports.
Customer and supplier records: names, phone numbers, addresses, GSTIN, khata balances, transactions, payment reminders and receipts — entered by the shop.
Payment details for your subscription: handled by our payment provider. We receive the payment status and reference, not your card or bank login details.
Technical data: IP address, device model, app version, push-notification token, and error and activity logs.

3. Why we use it

To create your account, sign you in and verify your phone number with a one-time code.
To run the features you use: billing, stock, khata, GST reports, reminders and receipts.
To send messages you ask us to send, such as payment reminders and receipts to your customers.
To bill your subscription and keep records required by tax law.
To keep the service secure, prevent misuse, fix problems and answer support requests.
To tell you about important changes to the service or to this policy.

We do not sell personal data, and we do not use your customers' data to market to them.

4. Where it is stored

Data is stored in databases on cloud servers run by our hosting provider. Each shop's data is kept separate from every other shop's, and staff of one shop cannot see another shop's records. We keep regular backups so we can restore data after a failure.

We share data only with service providers that help us deliver Bintree, and only what they need:

SMS and WhatsApp providers — to deliver sign-in codes, and the reminders and receipts a shop chooses to send.
Payment providers — to collect subscription fees and, when a shop uses payment links, to collect payments from its customers.
Hosting and infrastructure providers — to store the data and run the service.

We may also disclose data when the law requires it, for example in response to a valid order from a court or a government authority.

6. How long we keep it

We keep your data for as long as your account is active. When an account is closed, we delete or anonymise its data within a reasonable period, except records we must keep by law — for example, invoices and tax records — which we keep only for the period the law requires.

7. Your choices: access, export, correction and deletion

You can view and correct most of your data directly in the app.
You can export your business data from the web app at any time.
You can ask us for a copy of your data, to correct it, or to delete your account and its data.
Where we rely on your consent, you can withdraw it. Some features may stop working as a result.
You can nominate another person to exercise these rights if you die or become unable to.

To make a request, use the contact details in section 11. We may need to confirm your identity first.

8. How we protect it

Connections to Bintree are encrypted.
Passwords and sign-in codes are stored only in hashed form.
Every shop's records are isolated from other shops at the database level.
Inside a shop, access depends on each staff member's role.
Sign-in attempts are rate-limited to slow down password guessing.

No system is perfectly secure. If a breach affects your data, we will inform you and the authorities as the law requires.

9. The shop owner's responsibility for customer data

If you record your customers' or suppliers' details in Bintree, you are responsible for that data. In particular:

Record only what you need to do business with them, and keep it accurate.
Tell them you keep their details, and get their consent where the law requires it — for example, before sending them reminders on SMS or WhatsApp.
Act on their requests to see, correct or delete their data. You can do this in the app, and we will help when you ask.
Give staff access only to what their role needs, and remove access when someone leaves.

10. Children

Bintree is a tool for businesses. It is not meant for anyone under 18, and we do not knowingly collect data about children.

11. Grievance redressal (Digital Personal Data Protection Act, 2023)

If you have a question or complaint about how your personal data is handled, contact our grievance officer. We will acknowledge your complaint and respond within the time the law requires.

In the app: open Settings, then Help & support, and raise a ticket.

If you are not satisfied with our response, you may complain to the Data Protection Board of India.

12. Changes to this policy

We may update this policy as the service or the law changes. We will change the date at the top of this page and, for important changes, tell you in the app or by email before they take effect.

13. Governing law

This policy is governed by the laws of India.

14. Contact us

Inventory Management Software
In the app: Settings, then Help & support.