Privacy policy

Who we are

Paybot is a product of [LEGAL NAME], [ADDRESS]. For anything about this policy or your data, write to info@luure.ai or call +91 80755 95200.

This website

paybot.in is an information website. It has no sign-up and no forms, and it does not set cookies of its own.

• Server logs. Like most websites, our web server records each request: IP address, browser type, page requested, referring page and time. We use these logs only to keep the site running and secure, and delete them after [LOG RETENTION PERIOD].
• Fonts. Pages load the Inter font from Google Fonts, so your browser connects to Google's servers, which receive your IP address.
• Analytics. The website may use analytics cookies if enabled. If we turn on an analytics tool, we will name it here and explain how to opt out.
• WhatsApp, phone and email. When you tap "Book a demo", WhatsApp opens with a message to us. If you send it, or call or email us, we receive your name, number or email address and what you tell us, and use them only to reply, arrange a demo and follow up on your enquiry. WhatsApp's own privacy policy applies to your use of WhatsApp.

Data in the Paybot application

When a business subscribes to Paybot, it enters and stores its own business data in the application, for example:

• company details such as name, address, GSTIN and bank details;
• its customers and suppliers: names, phone numbers, email addresses, addresses and GSTINs;
• products, stock, invoices, quotations, receipts, expenses, purchases and accounting entries;
• staff user accounts: name, user name, email address, mobile number and role. Passwords are stored only as secure hashes;
• records the application keeps to work and stay accountable: an audit trail of who changed what and when, and a log of emails, WhatsApp messages and SMS sent from Paybot.

Each company's data is kept in its own separate database. On our cloud service the database is hosted on servers in India. On the Enterprise plan Paybot runs on the customer's own server, and the customer controls where the data is stored, who can reach it and how it is backed up.

For this business data, the business using Paybot decides what is collected about its own customers and why. We process it on that business's behalf and only to provide, support and secure the service. We do not sell it, and we do not use it for advertising.

The application uses a sign-in cookie to keep staff signed in, and a separate cookie for the customer portal if a business offers one to its customers. These cookies are needed for the service to work.

Third-party services

Some Paybot features send data to other services. Most are switched on by the business using Paybot and use that business's own accounts:

• Razorpay, for online payment links. Card, UPI and bank details are entered on Razorpay's pages and are not stored in Paybot; Paybot keeps the payment reference and status.
• WhatsApp Business API (Meta) and an SMS gateway, for sending invoices, reminders, receipts and sign-in codes to the phone numbers the business has stored.
• GST e-Invoice and e-Way Bill providers, which pass invoice and transport details to the government's Invoice Registration Portal and e-Way Bill system under the business's GSTIN.
• Email delivery, through the mail server set up for the business, for sending documents and reminders.
• Hosting and backup storage for our cloud service.

Each of these services handles data under its own terms and privacy policy. We share only what the feature needs.

Paybot Android app

The Paybot Android app opens your company's Paybot address inside the app. It asks for these permissions only:

• Internet and network state, to load Paybot and to know when the device is offline;
• Storage, only on Android 9 and older, to save downloaded PDFs and Excel files to the Downloads folder.

The app does not ask for location, contacts, camera or microphone access. It keeps your sign-in cookie on the device so you stay signed in. If you bill offline, those bills are kept on the device until they are sent to your Paybot account.

How long data is kept

Business data stays in the company's database while its subscription is active. When a subscription ends, the business can export its data to Excel, and we delete the database from our cloud service [DELETION PERIOD AFTER THE SUBSCRIPTION ENDS], unless the law requires us to keep it longer. Backups roll over and are deleted on their normal schedule.

Enquiries made by WhatsApp, phone or email are kept for as long as needed to deal with them and follow up.

Access, correction and deletion

You can ask us to tell you what personal data we hold about you, to correct it or to delete it, by writing to info@luure.ai. We will reply within [RESPONSE TIME].

If your details are in Paybot because you are a customer, supplier or employee of a business that uses Paybot, please contact that business first, because it decides what it keeps about you. We will help it act on your request.

How we protect data

• a separate database for each company;
• role-based permissions, so each staff member sees and changes only what their role allows;
• password sign-in with hashed passwords, and sign-in by one-time code (OTP) where the business turns it on;
• an audit trail of changes, and approval rights needed to change paid or filed documents;
• encrypted connections (HTTPS), and WhatsApp and SMS access keys stored encrypted;
• regular backups.

No system is perfectly secure. If we become aware of a breach affecting your data, we will inform the affected business and the authorities as the law requires.

Children

Paybot is a business tool and is not meant for children. We do not knowingly collect data about children through this website.

Changes to this policy

We may update this policy when Paybot or the law changes. The date at the top shows the latest version. For significant changes we will also tell subscribed businesses directly.

Contact and grievances

Grievance officer: [GRIEVANCE OFFICER NAME], info@luure.ai, [ADDRESS].

This policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.