Privacy Policy

1 Information We Collect

The information we collect depends on which Billing Fast features you use.

A. Account and Business Information

We may collect information such as:

• name;
• email address;
• mobile number;
• business or store name;
• business address;
• tax or GST information;
• account credentials and identifiers;
• subscription and plan information;
• business preferences and settings; and
• information you provide when contacting support.

B. Billing, Inventory and Transaction Information

When you use Billing Fast’s business-management features, we may process information relating to:

• invoices and bills;
• purchases and sales;
• products, inventory and stock;
• suppliers;
• customers;
• ledgers and balances;
• tax information;
• employees and users;
• returns and exchanges; and
• other records created or uploaded through the Services.

Some of this information may contain personal data relating to your customers, suppliers, employees or other individuals.

C. WhatsApp and Messaging Information

If you connect WhatsApp or WhatsApp Business functionality to Billing Fast, we may process information required to provide messaging and automation features, including:

• WhatsApp account and business identifiers;
• phone numbers;
• customer contact information;
• messages and conversation content;
• message status and delivery information;
• media or files exchanged through supported messaging features;
• automation instructions;
• conversation metadata; and
• information required to operate AI-assisted conversations.

Depending on the WhatsApp functionality you enable and the functionality made available by Meta, connecting an existing WhatsApp account may also allow certain existing conversation or contact information to be synchronized with Billing Fast.

We only process such information where required to provide the functionality enabled by the business using Billing Fast.

WhatsApp communications are also subject to the terms, policies and data practices of Meta and WhatsApp.

2 Artificial Intelligence

Certain Billing Fast features use artificial intelligence (“AI”) to help businesses automate or assist with customer conversations and business operations.

For example, AI may be used to:

• understand customer questions;
• generate or suggest responses;
• identify products or services;
• answer questions using information configured by the business;
• assist with orders or enquiries;
• trigger workflows; and
• perform other automated business functions.

To provide these capabilities, relevant information may be processed by third-party AI technology providers acting as service providers or subprocessors.

The particular AI providers and models used by Billing Fast may change over time as technology, performance, availability and commercial requirements evolve.

We seek to limit information shared with AI providers to information reasonably necessary to provide the relevant feature.

Where contractual or technical controls are available to us, we configure third-party AI services used by Billing Fast so that data submitted through our Services is processed for providing the applicable service and not for unrelated advertising purposes.

AI-generated responses may occasionally be incomplete or incorrect. Businesses using automated features are responsible for maintaining accurate information about their products, pricing, availability, policies and other business information used by the system.

3 Information Processed for Businesses

Businesses using Billing Fast may provide us with personal data relating to their customers, suppliers, employees or other persons.

For this information, the relevant business controls its relationship with those individuals and determines why Billing Fast is being used.

Billing Fast processes such information on behalf of the business to provide the Services requested by that business, subject to applicable law and our agreements with the business.

Businesses using Billing Fast are responsible for:

• providing any notices required by applicable law;
• obtaining necessary permissions or consents;
• ensuring that communications are lawful;
• complying with applicable messaging and marketing requirements;
• respecting customer opt-outs; and
• complying with applicable WhatsApp and Meta policies.

Billing Fast does not independently use a merchant’s customer conversations to market Billing Fast products directly to those customers merely because their information was processed through the Services.

4 Missed-Call and Companion App Features

Billing Fast may provide a companion application that enables businesses to automatically initiate configured workflows following certain phone-call events, including missed calls.

Where this feature is enabled, the companion application may access call-log information on the user’s device to identify the event required to activate the configured workflow.

Only the event or trigger information necessary to initiate the configured Billing Fast workflow is communicated to the Service.

Call-log information is not used for advertising.

Users may disable relevant permissions through their device settings, although doing so may prevent missed-call automation from functioning.

5 Device and Technical Information

When you use Billing Fast, we may automatically collect certain technical information, including:

• device type;
• operating system;
• app version;
• IP address;
• browser information;
• device identifiers;
• crash and diagnostic information;
• login activity;
• usage information; and
• security-related events.

We use this information to operate, secure, troubleshoot and improve the Services.

6 Permissions

Depending on the features you use, Billing Fast applications may request access to device capabilities such as the camera, files, notifications, contacts, phone functionality, call information or other permissions.

We request permissions only where they are required for the relevant feature.

Where required by the operating system or applicable law, permission will be requested before access occurs.

You can manage application permissions through your device settings.

7 How We Use Information

We may use information to:

• provide and operate Billing Fast;
• create and maintain accounts;
• provide billing, inventory and business-management functionality;
• enable WhatsApp and messaging integrations;
• provide AI-powered functionality;
• execute automations selected by users;
• synchronize information across authorized devices;
• provide customer support;
• process subscriptions;
• maintain security and prevent fraud or abuse;
• diagnose technical problems;
• improve reliability and performance;
• comply with legal requirements;
• enforce our Terms and policies; and
• communicate important product, security or account information.

Where applicable law requires consent or another specific legal basis for processing, we process personal data in accordance with those requirements.

8 Payments

Billing Fast may enable businesses to include or connect their own payment identifiers, payment links or third-party payment-gateway services within workflows or customer communications.

Unless expressly stated otherwise for a particular service, Billing Fast does not receive, hold or settle the underlying payments made by a merchant’s customers.

Payments are processed by the payment provider selected or configured by the merchant and are subject to that provider’s terms and privacy practices.

Billing Fast may separately process payments made by businesses for their own Billing Fast subscriptions.

9 How We Share Information

We may share or make information available to:

Service Providers and Subprocessors

We use third parties to help operate Billing Fast, including providers of:

• cloud hosting and infrastructure;
• AI and machine-learning technology;
• messaging infrastructure;
• analytics;
• communications;
• security;
• customer support; and
• payment processing for Billing Fast subscriptions.

These providers may process information only as necessary to provide their respective services, subject to applicable contractual and legal requirements.

Our providers may change from time to time.

Meta and WhatsApp

When a business enables WhatsApp functionality, relevant information is transmitted through or processed using Meta’s and WhatsApp’s infrastructure.

Meta and WhatsApp may process information in accordance with their own terms, policies and applicable agreements.

Legal and Safety Requirements

We may disclose information where reasonably necessary to:

• comply with law, regulation, legal process or lawful government requests;
• protect users or the public;
• investigate fraud, security incidents or abuse;
• enforce our agreements; or
• protect the rights and property of Billing Fast or others.

Corporate Transactions

If Billing Fast or Xero Apps Private Limited is involved in a merger, acquisition, financing, restructuring, sale of assets or similar corporate transaction, information may be transferred as part of that transaction subject to applicable law.

10 Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, to provide the Services, resolve disputes, maintain security, comply with legal obligations and enforce our agreements.

Different categories of information may have different retention periods.

Certain financial, accounting, tax or transaction records may be retained for longer periods where required by applicable law.

When a Billing Fast account is scheduled for deletion, we aim to delete or de-identify personal data associated with the account within 30 days, except where:

• retention is required by law;
• information is required to resolve an active dispute;
• retention is necessary for fraud prevention or security;
• information remains temporarily in secure backups; or
• another lawful reason requires limited continued retention.

Information retained in backups is isolated from ordinary use and deleted according to our backup lifecycle.

11 Account Deletion and Data Export

Billing Fast provides users with mechanisms to delete their accounts.

Where supported by the applicable feature, users may also export their data before account deletion.

Once an account-deletion request becomes effective, access to some or all data may no longer be available.

Additional instructions regarding deletion may be provided on our Data Deletion page.

12 Security

We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration or disclosure.

These measures may include access controls, authentication mechanisms, encryption in transit where appropriate, infrastructure security, monitoring and restricted internal access.

No internet-based system can guarantee absolute security, and we therefore cannot guarantee that unauthorized access or disclosure will never occur.

If we become aware of a personal-data breach requiring notification under applicable law, we will take appropriate steps to investigate, mitigate and provide required notifications.

13 International Processing

Billing Fast may use infrastructure and service providers located in different countries.

As a result, information may be processed outside the country in which a user or customer is located.

Where applicable law imposes requirements on international transfers of personal data, we will use appropriate safeguards or other lawful transfer mechanisms as required.

14 Your Rights

Depending on where you live, applicable law may give you rights relating to your personal data, which may include rights to:

• obtain information about processing;
• request access to personal data;
• request correction or updating of inaccurate information;
• request deletion or erasure;
• withdraw consent where processing is based on consent;
• object to or restrict certain processing;
• nominate another person to exercise certain rights where permitted;
• obtain grievance redressal; and
• complain to an applicable data-protection authority.

Not every right applies in every jurisdiction or circumstance.

Where Billing Fast processes personal data solely on behalf of a business, we may direct the individual to the relevant business so that the request can be handled appropriately.

15 Children

Billing Fast is designed for businesses and is not intended to be used independently by children.

We do not knowingly solicit personal data directly from children for the purpose of creating independent Billing Fast business accounts.

Where a business processes information relating to children through Billing Fast, that business is responsible for complying with applicable laws concerning children’s data and obtaining any required consent or authorization.

For jurisdictions where a specific age threshold applies, we follow the definition of a child under applicable law. Under India’s Digital Personal Data Protection Act, a child is a person who has not completed eighteen years of age.

16 Cookies and Similar Technologies

Our websites may use cookies and similar technologies to:

• maintain sessions;
• remember preferences;
• understand website usage;
• improve performance;
• detect fraud or abuse; and
• provide relevant functionality.

Where required by applicable law, we will obtain consent before using non-essential cookies.

Browser settings may allow you to control or delete cookies.

17 Communications and Opt-Outs

Businesses using Billing Fast are responsible for ensuring that their customer communications comply with applicable consent and messaging requirements.

Recipients may use available opt-out mechanisms provided by the relevant business or messaging platform.

Where Billing Fast provides mechanisms for businesses to record or implement opt-outs, businesses are responsible for using those mechanisms appropriately.

We may restrict or suspend use of messaging functionality where we reasonably believe it is being used for spam, unlawful communications, abuse or conduct that may harm users, Billing Fast, Meta/WhatsApp platform integrity or messaging quality.

18 India

For individuals in India, Billing Fast processes personal data in accordance with applicable Indian data-protection and information-technology laws.

The Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 have a phased commencement schedule. Billing Fast will apply requirements of those provisions as and when they become legally effective and will update its practices where necessary.

Where the applicable provisions require consent, notices, correction, erasure, grievance redressal or other Data Principal rights, Billing Fast will provide mechanisms consistent with those requirements.

Nothing in this Privacy Policy limits rights available under mandatory applicable law.

19 Grievance and Privacy Contact

If you have a privacy question, complaint or request concerning personal data, you may contact:

Please include sufficient information for us to identify your account or request.

We will acknowledge and respond to grievances within the timeframes required by applicable law.

For information processed by Billing Fast solely on behalf of a merchant or other business, we may need to refer your request to that business.

20 Third-Party Services

Billing Fast may integrate with third-party products and services.

Your use of those services may also be governed by the third party’s own terms and privacy policies.

Billing Fast is not responsible for the independent privacy practices of third parties where they determine their own purposes and means of processing.

21 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• new products or functionality;
• changes to our data practices;
• changes to service providers;
• legal or regulatory developments; or
• security and operational requirements.

When we make material changes, we will update the “Last Updated” date and provide additional notice where required by applicable law.

Continued use of the Services following an update does not override any consent or notice requirements imposed by applicable law.

22 Contact Us

For privacy questions or requests:

Additional company and registered-office information may be provided on our website and Terms of Service.