Privacy Policy

1. Introduction

Speedaily BOS ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Speedaily BOS (the "App") and our website (the "Website").

Note: Replace the bracketed placeholder above with your actual registered business address before publishing. A complete postal address is required by Google Play, GDPR, and CCPA.

2. Information We Collect

We collect the following categories of personal and financial data:

2.1 Personal Information

• Name and email address (for account creation and authentication)
• Phone number (optional, for account recovery)
• Business name and address (for invoice generation)
• Profile photo (optional)

2.2 Financial Information

• Invoice data (items, amounts, customer details)
• Expense records (amounts, categories, receipts)
• Bank account details (for reconciliation features, if enabled)
• GST/Tax identification numbers
• Payment transaction records

2.3 Device and Usage Information

• Device type, operating system, and version
• App usage analytics (features used, session duration)
• Crash reports and performance data
• IP address and approximate location (country/region level only; we do not collect precise GPS location)

3. How We Use Your Information

We use the collected data for the following purposes:

• Account Management: To create and manage your user account, authenticate your identity, and provide customer support.
• Core App Functionality: To enable invoicing, expense tracking, financial reporting, GST calculations, and bank reconciliation.
• Service Improvement: To analyze usage patterns, fix bugs, and improve app performance and features.
• Communication: To send service-related notifications, updates, and respond to your inquiries.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes including the Indian Income Tax Act, GST laws, and the Companies Act.
• Security: To detect, prevent, and address fraud, unauthorized access, and other security issues.

4. Data Sharing & Third Parties

We may share your information with the following categories of third parties:

• Cloud Infrastructure Providers: For secure data storage and processing (e.g., Google Cloud Platform, Amazon Web Services).
• Analytics Services: For app usage analytics and crash reporting (e.g., Google Analytics, Firebase Crashlytics). Data shared is anonymized or pseudonymized.
• Payment Processors: If you subscribe to a paid plan, payment information is processed by third-party payment gateways. We do not store full credit/debit card numbers.
• Legal Authorities: When required by law, court order, or governmental regulation.

5. Storage, Security & Retention

5.1 How We Protect Your Data

Your data is stored on secure cloud servers with industry-standard protections:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Regular security audits and vulnerability assessments
• Access controls and authentication for internal systems
• Automated daily backups with geographic redundancy

5.2 Data Retention Periods

We retain your data for different periods depending on the type of data and applicable legal requirements:

• Account deletion grace period (90 days): When you submit an account deletion request, your account is deactivated immediately and your personal data is retained in a secure, restricted state for 90 days. During this period, the data is recoverable in case of an erroneous deletion request. After 90 days, all personal data (account, profile, app preferences, analytics, personally identifying invoice details) is permanently deleted from our active systems and overwritten in encrypted backups.
• Financial transaction records (7 years - mandatory by law): Summarized financial transaction records (invoice totals, GST amounts, transaction dates, tax identifiers) must be retained for 7 years as legally required under the Indian Income Tax Act, 1961, the Goods and Services Tax (GST) laws, and the Companies Act, 2013. Personally identifying details (customer names, contact information, receipt images) are removed; only the aggregated, tax-required fields are retained for compliance audits. These records are not user-accessible.

6. International Data Transfers

Your data may be transferred to and processed on servers located outside India, including in the United States and the European Union, where our cloud infrastructure providers (such as Google Cloud Platform and Amazon Web Services) operate data centers.

When we transfer your data internationally, we ensure adequate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data processing agreements with our cloud providers
• End-to-end encryption during transit and at rest
• Access controls limiting data access to authorized personnel only

By using Speedaily BOS, you consent to the transfer of your data to these jurisdictions for the purposes described in this Privacy Policy.

7. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your account and associated data (subject to the 7-year retention requirement for tax records described in Section 5.2). Visit our Data Deletion page to submit a request.
• Export: Export your data in standard formats (PDF, CSV, Excel) from within the App. Exports include all personal and financial data associated with your account.
• Restriction: Request restriction of processing in certain circumstances.
• Objection: Object to processing of your data for specific purposes.
• Withdraw Consent: Withdraw consent for processing where processing is based on consent.
• Lodge a Complaint: If you are in the EU or UK, you have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, please contact us at privacy@speedaily.com. We will respond within 30 days.

8. Children's Privacy

Our App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete such information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice through the App or via email.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: