Privacy policy

1. Who is responsible for what

For your BillingApp account - your name, phone number, email and business details - we decide how that information is used, and this policy is our commitment about it.

The records a business keeps in BillingApp - its customers, suppliers, invoices, payments, stock and accounts - belong to that business. The business decides what to record and why; we store and process those records on its behalf, only to provide BillingApp to it. If you are a customer of a business that uses BillingApp, that business is your first point of contact about the records it keeps about you (see section 8).

2. What we collect

When a business signs up and uses BillingApp:

• The owner's and staff members' names, mobile numbers and, where used, email addresses and passwords (passwords are stored only in scrambled form by our sign-in provider).
• Sign-in codes sent over WhatsApp. They expire within minutes and are stored only in scrambled (hashed) form.
• Business details the owner enters: business name, address, logo, contact numbers and settings.
• The business's own records: products, prices and stock; invoices, purchases and payments; the chart of accounts; and customers and suppliers with the names, phone numbers, addresses and balances the business chooses to record.
• Technical records needed to run and secure the service, such as sign-in times and error logs.

WhatsApp messages. BillingApp sends and receives WhatsApp messages from its own business number through the WhatsApp Business Platform, run by Meta:

• Sign-in codes, to the person signing in.
• Payment receipts, only when a business has switched receipts on: when the business records a payment from or to one of its customers or suppliers, that person receives a message with the business's name, the amount, the voucher number and date, their balance, and a link to view the receipt.
• Replies. When someone writes back to BillingApp's number, we store their number, their WhatsApp profile name, the text of the message, the time, and - for photos, voice notes and files - what kind of attachment it was and its caption. (We do not download the attachment itself.) We also store the delivery status Meta reports for each message we send: sent, delivered, read or failed.

Online shops. When a shopper places an order on a business's BillingApp shop, we collect the name, phone number, delivery address and order details they enter, and pass them to that business. Items in a shopper's cart and wishlist are kept on the shopper's own device, not on our servers.

Prescription photos. Only at a business whose owner has switched this on: staff may photograph a customer's prescription with a phone while making their bill. We keep the photo privately, tied to the bill, to teach and test BillingApp's reading of prescriptions. Only BillingApp's platform administrators can see these photos; the patient's name on the bill is never used for this.

AI features. When a user asks BillingApp's assistant ("Munshi") a question, creates products from photos, or a shopper uses a shop's "Ask about this item" assistant, the question and the information needed to answer it are processed as described in section 4.

3. Why we use it

• To provide BillingApp: sign-in, point of sale, invoicing, accounts, reports, stock.
• To send the WhatsApp messages described above, and to show a business the replies meant for it.
• To run a business's online shop and deliver its orders to it.
• To keep the service secure, prevent abuse, fix faults and back up data.
• To contact account holders about their account, support requests and billing.

We do not sell personal information. Our hosting provider (Lovable) records basic visit statistics - pages viewed, where the visit came from, the kind of device - and how fast pages load; we use these only to see how the site is used and to keep it fast.

Google Ads measurement. We advertise BillingApp on Google. On our public marketing pages, and at the moment a new business account is created, we use the Google tag to tell Google that a visit or signup happened, so we can measure and improve our ads. Google receives the page address (without any query string), a cookie identifier, the ad click and the visitor's IP address. We send no names, phone numbers, emails or business records, and the tag never runs inside the app itself or on a business's online shop. It is not loaded for visitors in the EEA, the UK, Switzerland or Canada. You can block it with your browser's cookie or tracker settings, and manage Google ad personalization at adssettings.google.com. See how Google uses this information.

4. Who else sees it

We share information only with the service providers that BillingApp runs on, each for its own part of the work:

• Hosting and database - BillingApp's database, file storage and servers are provided by Supabase (through Lovable Cloud), Lovable and Cloudflare.
• Meta (WhatsApp) - carries the WhatsApp messages described above. Messages on WhatsApp are also subject to WhatsApp's own terms and privacy policy.
• AI providers - Anthropic (Claude) answers assistant questions and reads product photos; OpenAI edits product images when a business asks for it. We send only what the feature needs. Under their API terms, what we send is not used to train their models.
• Google Fonts - online shop pages load a typeface from Google, which receives the visitor's IP address as part of serving it.

Between businesses and their customers. A business sees the records it keeps and the WhatsApp replies meant for it. Many businesses share BillingApp's one WhatsApp number, so when a customer of more than one of them writes back without making clear which business they mean, the message is shown to none of them: we ask the customer which business it is for, and it goes to that one. Until then it is visible only to BillingApp's administrators, who pass it on or delete it. No business is shown a message meant for another.

Receipt links. Anyone who has the link in a WhatsApp receipt can open that one receipt. The link is a random code and is not listed anywhere.

The law. We disclose information when Pakistani law requires it, and only as much as it requires.

5. On your device

BillingApp stores a few things in the browser: the sign-in session, the chosen language and screen preferences, and - for offline selling - sales made without an internet connection until they reach our servers. Online shops keep the cart and wishlist there. These are needed for the app to work; none of them track you across other websites.

6. How long we keep it

• Account and business records are kept while the business uses BillingApp. When an account is closed they are deleted within 30 days (see our data deletion page); copies in backups are overwritten on their normal cycle.
• WhatsApp messages and their delivery status are part of the business's records and are kept with them. Replies that no business has claimed are passed on or deleted by our administrators.
• Prescription photos are deleted 90 days after they are taken. The list of medicines sold on the bill stays with the business's records.
• Sign-in codes expire within minutes.
• A business may need to keep invoices and payment records for longer to meet tax law; that is the business's decision and its obligation.

7. How we protect it

All traffic is encrypted (HTTPS). Every business's records are kept apart from every other business's by access rules in the database itself, and within a business each staff member sees only what the owner has permitted. Access to the servers is limited to the people who run BillingApp.

8. Your choices and rights

• Account holders can see and correct their details in the app, and can ask us for a copy of their records or to close their account and delete them.
• Customers and suppliers of a business can ask that business to correct or delete what it holds about them. You can also write to us and we will pass your request on and help it get done.
• Stopping WhatsApp receipts: tell the business, or reply to the message saying you do not want them - your reply reaches the business - or contact us and we will see that they stop.

To make any request, write to contact@jzeeai.com or on WhatsApp to +92 345 649 1425. We reply within 7 days and complete requests within 30 days. Full steps for deletion are on the data deletion page.

9. Children

BillingApp is a tool for businesses and is not meant for anyone under 18. We do not knowingly collect information about children.

10. Changes to this policy

When BillingApp starts handling information in a new way, this page is updated and the date at the top changes. Significant changes are also announced to account holders in the app.