Privacy Policy — Bepara
Last updated: June 3, 2026
1. Information We Collect
1.1 Information You Provide
Account details (name, email, business name, GSTIN, address), transaction data (invoices, purchases, payments), and uploaded documents.
1.2 Information Collected Automatically
- Usage data (pages visited, features used, session duration)
- Device and browser information
- IP address and approximate location
1.3 Payment Information
We collect billing information necessary to process payments. Payment processing is handled by Razorpay and we do not store full payment card details.
2. How We Use Your Information
- To provide and maintain the Service
- To process transactions and send related communications
- To improve and personalize the Service
- To communicate with you about updates, security, and support
- To detect and prevent fraud or abuse
3. Third-Party Services
We use the following third-party services:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase Inc. | Database, authentication, storage | Account data, usage data |
| Cloudflare Inc. | CDN, DNS, DDoS protection | IP address, request metadata |
| Razorpay | Payment processing | Payment details (PCI-DSS compliant) |
| Indian NIC (IRP) | GST e-invoice generation | Invoice data, GSTIN |
Each third-party service has its own privacy policy governing the use of your data.
4. Data Storage & Security
- Data is stored on Supabase servers (Google Cloud, multi-region)
- We implement encryption in transit (TLS 1.3) and at rest
- Access controls and RLS policies restrict data access
- Backups are performed daily with 7-day retention
5. Data Retention
We retain your data for as long as your account is active. After account deletion, data is purged within 30 days unless required for legal or compliance purposes.
6. Your Rights (GDPR)
If you are in the EEA, you have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
To exercise these rights: sdachary@gmail.com
7. Cookies
We use essential cookies for authentication and session management. We do not use tracking cookies or third-party analytics cookies.
8. Children's Privacy
The Service is not intended for users under 18. We do not knowingly collect data from children.
9. Changes to This Policy
We may update this policy. Material changes will be communicated via email or in-app notification.
10. Contact
Bepara
sdachary@gmail.com