Privacy policy
Who we are
Axomyq LLP ("Axomyq", "we"), Duliajan, Assam, India, operates the website and the two applications. For anything in this policy, write to admin@axomyq.in.
What we collect
On the website
Nothing you type. The website has no forms, no analytics and no advertising cookies. Our hosting provider records standard server logs (IP address, browser, time) for security.
In BillBook and ContractZen
- Account details — name, email, mobile number and password (stored only as a hash).
- Firm details — firm name, address, GSTIN, PAN, bank details and logo you enter for your documents.
- Business records you create — customers, quotations, invoices, receipts, stock, attendance, payroll and registers.
- Employee records (ContractZen) — names, photographs, identity document numbers and bank details of workers you enter. You are responsible for having the right to record this.
- Files you upload — attachments and compliance documents.
- Usage and security logs — login times, one-time codes, and an audit trail of changes.
Why we use it
To run the service you signed up for: producing your documents, calculating tax and payroll, sending emails you request, keeping your account secure, and answering you when you write. We do not sell your data and do not use it for advertising.
AI features
Some features — currently the AI quotation writer in BillBook — send the text you type into that feature to Anthropic PBC to generate a draft. Only that text is sent, only when you use the feature, and drafts are shown to you before anything is saved. If you would rather not use AI features, simply do not use them; nothing else depends on them.
Where data is stored
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage | Mumbai, India (ap-south-1) |
| Vercel | Application and website hosting | Mumbai edge region; global network for static files |
| Brevo | Transactional email (login codes, notifications) | European Union |
| Anthropic | AI text generation for opt-in features | United States |
Each provider acts on our instructions under its own data-processing terms. Because some are outside India, limited data may leave India for the purposes above.
How long we keep it
- Account and business records — while your account exists.
- After deletion — most data removed within 30 days. Invoices and related tax records may be retained for the period Indian tax law requires (currently 72 months after the due date of the relevant annual return), locked and unused for anything else.
- Server and security logs — 90 days.
Security
All traffic is encrypted in transit. Firm data is separated at the database level with row-level security. ContractZen requires a one-time code as well as a password. Access to production systems is limited to the founder. No system is perfectly secure; if we learn of a breach affecting your data we will tell you without undue delay.
Your rights
You can see and correct your data in the app at any time, ask us to export it, or delete your account by following these steps. Under the Digital Personal Data Protection Act, 2023 you may raise a grievance with us at the email above; we aim to resolve it within 30 days.
Children
The services are for businesses and are not directed at anyone under 18.
Changes
Material changes will be emailed to account holders and the date above updated.