Privacy Policy
Your books are yours. Here is exactly what we hold.
Written to the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. Plain sentences, because a notice you cannot read is not a notice.
Version 2.1 · Last updated 10 October 2026
Who is asking
ZenBillOS is operated by ZenTarRix, based in Gujarat, India. Under the Digital Personal Data Protection Act, 2023, that makes ZenTarRix the Data Fiduciary, and you the Data Principal.
Who answers your questions
Section 8(9) of the Act requires us to publish the contact details of a person who can answer questions about how your data is processed. Section 8(10) requires a working way to raise a grievance. Both are the same person today:
Grievance Officer
Dixit Patel
help@zentarrix.com
ZenTarRix, Visnagar, Gujarat, India
We reply within 30 days. If we do not resolve your complaint, you may take it to the Data Protection Board of India.
What we collect, and why
Each purpose below is separate, and each is asked for separately in the app. Only the first is required. Saying no to any of the others leaves you with a fully working billing app — that is a requirement of section 6(1), not a courtesy.
Running your account and your bills Required
To create and run your account, issue your invoices, and keep the records GST law requires us to keep.
What we use
- Business name
- Phone number
- Email address
- GSTIN if you provide one
If you say no: You cannot use ZenBillOS. This is the agreement itself.
Voice billing and bill scanning Optional
To turn your speech or a photo into a draft bill that you check and save yourself. The assistant never saves or sends anything on its own.
What we use
- What you say while making a bill
- Photos of supplier bills you choose to scan
Who else sees it
- Sarvam AI — speech to text and the assistant, processed in India
- Sarvam Vision — reads photos and scans of bills and documents, processed in India
If you say no: Voice billing and bill scanning switch off. Typing bills by hand works exactly as before.
Helping improve ZenBillOS Optional
To make the assistant better at recognising items and picking the right GST rate. Your business name, your customers, amounts and dates are removed first — what we keep cannot be traced back to you or to anyone who shops with you.
What we use
- Item names with their HSN codes and tax rates
- Where our tax suggestion was wrong and what the correct rate was
If you say no: Nothing changes. Every feature keeps working.
Offers and product news Optional
To send you news about ZenBillOS features and pricing. Off unless you turn it on.
What we use
- Your phone number
- Your email address if you gave one
Who else sees it
- MSG91 — SMS and WhatsApp, India
- Resend — email
If you say no: Nothing changes. You still get messages about your own bills and account.
What the app asks your phone for
Every permission below is listed because the installed app genuinely declares it. Each one is tied to a feature you can see.
Microphone You can refuse
Voice billing. You hold the button, speak the sale, and the app turns it into a draft bill you check before saving.
If you refuse: Voice billing switches off. Typing a bill works exactly as before.
Camera You can refuse
Photographing a supplier's bill so it can be read into a draft purchase entry, and scanning a barcode at the counter.
If you refuse: Scanning switches off. You can still type a purchase bill and search items by name.
Background audio You can refuse
Keeps a voice recording alive for the few seconds you are speaking if the screen turns off mid-sentence.
If you refuse: Tied to the microphone. Off when voice is off.
Fingerprint or face unlock You can refuse
Locking the app so a person who picks up your phone cannot open your books. The check happens on your device; we never receive your fingerprint.
If you refuse: The app lock is not available. Everything else works.
Network access Granted at install
Syncing your bills when you are online, and detecting when you are not so the app can keep working offline.
If you refuse: Granted automatically at install; Android does not prompt for it.
Vibration and keeping the screen awake Granted at install
Haptic feedback when a bill saves, and stopping the screen sleeping mid-sale.
If you refuse: Granted automatically at install; Android does not prompt for it.
What we deliberately do not ask for
This list matters as much as the one above. In particular, and because people ask: ZenBillOS does not use location. There is no location permission in the app at all. We do not know which city your shop is in unless you type it into your business profile yourself.
- Location, of any kind — not precise, not approximate, not in the background. The app does not know or record where you are.
- Your contacts. Customers you add are typed by you, not read from your phone.
- Your SMS messages or call log.
- Files on your device, beyond a single file you point at yourself when importing or exporting.
Where your data lives
In India. Not as a marketing line — the servers are physically in Indian regions and were chosen that way.
- Your bills, items, customers and ledger — Supabase, Mumbai (ap-south-1)
- The application servers — DigitalOcean App Platform, Bengaluru (blr)
- Short-lived caches and queues — Upstash, Mumbai
- The marketing website you are reading — Vercel (global edge; carries no merchant data)
One exception, stated plainly: the service that sends your sign-in emails operates from the United States, so an email address leaves India in order to reach your inbox. Nothing else from the app does (the website's optional cookies are covered below).
Everyone who can touch your data
Named, not described as “our trusted partners”. Vagueness here is the usual failure.
| Who | What for | Where |
|---|---|---|
| Supabase | Database hosting | Mumbai, India |
| DigitalOcean | Application servers | Bengaluru, India |
| Upstash | Caching and queues | Mumbai, India |
| Sarvam AI | Speech to text and the assistant, only if you switch on voice billing and scanning | India |
| Sarvam Vision | Reads photos and scans of bills and documents, only if you switch on voice billing and scanning | India |
| Resend | Sending account and one-time-code emails | United States |
| MSG91 | SMS and WhatsApp, only if you enable them | India |
| Sign in with Google, if you choose it | Global |
We do not sell your data, to anyone, ever. We do not share your customer list, your sales figures or your margins with other merchants, with advertisers, or with lenders.
Your rights, and where the button is
The Act gives you these. Where we have built a way to use them yourself, the path is written out — a right you have to email someone about is a weaker right than one with a button.
| Right | Act | How |
|---|---|---|
| Know what we hold | s.11 | In the app: Settings, then My Account, then Privacy, then Get a copy of my data. One file per kind of record, sent wherever you choose. |
| Correct what is wrong | s.12(1)–(2) | Edit it in the app. Anything you cannot reach yourself, ask us. |
| Be erased | s.12(3) | In the app: Settings, then My Account, then Delete my account. Read the next section first — GST law keeps your bills even after you go. |
| Withdraw a consent | s.6(4) | Every optional purpose has its own switch in Settings, My Account, Privacy. Before you switch one off, the app tells you what will stop working. |
| Nominate someone | s.14 | Email us. This is not yet a button in the app. |
| Complain | s.13 | Email help@zentarrix.com. If we do not resolve it, you may complain to the Data Protection Board of India. |
How long we keep things
The honest version, including the part that surprises people: deleting your account does not delete your bills. GST law requires a business to keep its tax records for 72 months, and section 12(3) of the DPDP Act allows retention where another law requires it. So we erase you and keep the records, locked, with nobody able to sign in and read them.
| What | How long | Why |
|---|---|---|
| Invoices, credit notes and payment records | 72 months (six years) | GST law requires a business to keep its tax records for this long. This survives account deletion — the records are locked so nothing can change them, and nobody can sign in to read them. |
| Your name, phone number, email and password | Erased when you delete your account | Not needed once you leave. |
| Voice recordings | Not stored after the draft is produced | The audio is sent for transcription and the text comes back. We keep the bill, not the recording. |
| Consent records | Kept while the account exists and afterwards | So we can always answer what you agreed to and on which day. This is the record that protects you as much as us. |
What the assistant may and may not do
The voice assistant and the bill scanner only ever produce a draft. They fill in the same fields you would type, on the same screen, and you press Save. There is no setting that lets the assistant issue an invoice, send anything to a customer, or file anything with the government. That is a design rule we do not intend to offer a way around, because you carry the legal liability for every bill issued in your name.
Which AI providers. Voice billing and the assistant use Sarvam AI; reading photos and scans of bills uses Sarvam Vision. Both are named in the table above and are used only after you switch voice billing and scanning on. We do not send your data to any other AI provider. If that ever changes we will name the new one here and ask you again before using it.
Cookies on this website
This section is about zentarrix.com, the website, not the billing app. The website sets two cookies of its own, and it can set analytics cookies only if you allow them.
- zx-country (needed, 30 days): the country your visit comes from, so the page can say where your data would be stored. It holds no other information about you.
- zx-consent (needed, 1 year): your answer to the cookie banner, so we do not ask again on every page.
- Google Analytics (optional, only if you say yes; up to 2 years): which pages were visited, how you arrived (for example from an ad or a search), and your device and browser type. We use it to improve the website.
- Google Ads (optional, only if you say yes; up to 90 days): whether you reached us from one of our Google, YouTube or search ads, so we can measure those ads and show them to people likely to find ZenBillOS useful.
- Meta Pixel (optional, only if you say yes; up to 90 days): the same, for our Facebook and Instagram ads.
Google LLC and Meta Platforms process the optional data, and it may be handled outside India. If you say no, none of these scripts load and the website works exactly the same. You can change your answer whenever you like from Cookie settings in the footer.
Children
ZenBillOS is a tool for running a business and is not intended for anyone under 18, and sign-up asks you to confirm that you are 18 or older. We do not knowingly collect data from children. If you believe a child’s data has reached us, write to help@zentarrix.com and we will erase it.
If something goes wrong
If personal data is exposed, the Act requires us to tell both the Data Protection Board and every affected person. We will tell you what happened, what it means for you, what we have done, and who to contact — in plain language, not a legal notice.
Changes to this notice
Every version is numbered, and the app records which version you agreed to and on which day. If we change what we do with your data, we ask again rather than treating an old agreement as covering something new. The app asks you again in Settings, My Account, Privacy when that happens.
Version 2.1 · 10 October 2026 · Questions to help@zentarrix.com