Your data, and how we handle it

OthTech Invoice & Inventory (“the service”) is run by OthTech Solutions, 3rd Floor, Building No - 65B, Lane - 3, Devraj Path, Dwarkarpuri Nagar, Hajipur, Bihar 844103, India. In this policy “we” and “us” mean OthTech Solutions. “You” means the business that signs up and the people it invites to its workspace.

This policy covers this website and the service. Our other products and the company website at othtech.com have their own policies.

• Account details: name, email, phone, a one-way hash of your password (never the password itself), business name, GSTIN, PAN, address, business type and plan.
• Business records: whatever you enter or import, such as parties, products, invoices, purchases, stock movements, payments and expenses.
• Payments: online payments run through Razorpay. We receive the payment status and reference, not card numbers or bank login details.
• Technical data: IP address, browser and device type, sign-in times, and an audit log of who changed what in your workspace. We use it for security, preventing abuse and support.
• What you send us: emails, calls, demo requests and support conversations.

• To run the service: billing, stock, books, GST returns, and the emails you ask it to send, such as invoices, reminders and receipts.
• To keep accounts safe: sign-in checks, lockouts after repeated wrong passwords, two-factor codes and spotting misuse.
• To support you and send service messages: password resets, plan and billing notices, and important changes.
• To improve the product, looking at how features are used in aggregate, never to profile your customers.
• To meet legal duties, such as tax and accounting rules, and lawful requests from authorities.

We do not sell personal data, we do not use your business records for advertising, and there are no ads in the product.

We use a small number of service providers to run the service. Each gets only what its job needs.

We may also disclose data when the law requires it, for example under a court order or a request from a tax authority, or as part of a sale or merger of our business, in which case this policy would continue to apply and you would be told.

The app keeps your sign-in tokens and a few preferences, such as language, theme, the branch you last picked and counter printer settings, in your browser's local storage so you stay signed in and the screens open the way you left them.

We do not use advertising cookies or third-party trackers. Clearing your browser data signs you out and resets those preferences on that device.

Every workspace is kept apart inside the database with row-level security. Connections are encrypted, passwords are hashed, sign-in locks after five wrong attempts, two-factor codes are available to every user, and every change is written to an audit log. The full detail is on our Security & data page.

No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.

• Account data and business records are kept for as long as your account is open.
• Deleted records go to a recycle bin first, so a user with permission can restore them.
• Indian GST law asks businesses to keep their accounts and records for 72 months from the due date of the annual return for that year. Keeping your own copies is your duty as the business; export them from Settings before you close an account.
• When you ask us to close your account, we delete your workspace, except what we must keep by law, such as our own invoices to you. Copies in backups are overwritten as the backups roll over.

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

• tell you what personal data we hold about you and how we use it;
• correct or complete data that is wrong or out of date;
• erase data we no longer need, unless the law requires us to keep it;
• hear and resolve a grievance about how your data is handled;
• let someone you nominate act for you if you are unable to.

Much of this you can do yourself: edit your profile, export your data from Settings, and use the erase tool on a customer record, which removes their name, email, phone and notes while keeping the invoices the law requires. For anything else, write to admin@othtech.com. We will confirm who you are before acting on a request.

If a shop, distributor or firm bills you through OthTech, that business decides what it records about you and is responsible for it. Please send requests about your data to that business first. If you write to us instead, we will pass your request to them and help them act on it.

Some of the providers listed above, such as the AI and email services, may process data outside India. We use them only for the purposes in this policy and choose providers that protect data to a standard at least as high as ours. We will follow any restriction the Government of India places on transfers to particular countries.

The service is for businesses and is not meant for anyone under 18. We do not knowingly collect personal data from children.

When we change this policy we update the date at the top. If a change affects how we use your data in a meaningful way, we will email the owner of each workspace before it takes effect.

Questions, requests and complaints about privacy go to our grievance officer:

We reply within 7 days and aim to resolve every grievance within 30 days. If you are not satisfied with our answer, you can take your complaint to the Data Protection Board of India.