YOUR INFORMATION

Privacy Policy

Last updated: 17 October 2026

This policy covers the VNBILL website, web billing application and Android and iOS mobile applications. It explains the information used to provide the service, how it is handled, and how to request correction, personal account deletion or organisation closure.

VNBILL is jointly owned by NANTECH Solutions, the development partner, and VYAN Consultancy Services, the marketing partner. Both partners routinely access demo-enquiry information for follow-up, demonstrations and support. VYAN Consultancy Services is the contact point for enquiries and privacy requests.

NANTECH Solutions publishes the mobile applications. Your organisation administers its users, permissions and business records. Authorised organisation users can access records according to their assigned permissions. Our authorised personnel may handle information for hosting, maintenance, security, support and verified privacy requests; access is limited to those purposes.

Information we handle

Please do not send passwords, OTPs, authentication tokens, payment-card details or unnecessary sensitive business records in enquiry, support or deletion messages.

How we use information

We use information to authenticate users, apply organisation and role restrictions, manage customers and inventory, calculate and store invoices, display reports, and enable printing and sharing. We also use it to protect the service, investigate errors or misuse, respond to support and privacy requests, and meet applicable obligations. Demo-enquiry information is used to arrange demonstrations, send acknowledgements and Google Meet invitations, and discuss the service requested. We may contact you by email, telephone or WhatsApp in connection with these purposes.

Device storage and biometric unlock

The mobile app stores sign-in credentials such as refresh tokens using the device's protected storage. Optional biometric unlock uses the operating system's fingerprint or face authentication. VNBILL does not receive or store your fingerprint or facial template; the operating system handles biometric verification. Biometric unlock does not replace server-side account and session checks.

Printing and sharing

When you preview, print or share an invoice, a document may be generated on your device and passed to the printer, application or recipient you select. Exported documents can contain customer and business information. You control these disclosures; copies already shared, downloaded or printed are not removed merely by signing out or deleting an account.

Delivery and service providers

Hosting, database, email and messaging providers process information needed to operate VNBILL and deliver communications, including email or WhatsApp OTPs when enabled by your organisation. Demo requests are delivered to our team by email, and Google Meet is used for demonstrations. Verified organisation-closure correspondence is handled by the requesting administrator and authorised NANTECH Solutions and VYAN Consultancy Services personnel. We may also disclose information where required by law or necessary to address fraud or security incidents. We do not sell your personal information.

If you choose to communicate through WhatsApp, visit an app store, or share a document with another service, that provider's terms and privacy practices also apply.

Cookies and technical information

The marketing website uses an essential session cookie to protect the demo form and prevent duplicate submissions. A short-lived hashed network address is used to limit abusive requests. The web billing application also uses authentication/session information; native mobile requests use authentication tokens. Hosting services may keep technical access and error logs. The production marketing website uses Google Analytics to understand website visits and interactions and improve the website. Google Analytics may use cookies and process technical information such as device/browser details, page URLs and referral information. Google's Privacy Policy explains how Google handles information. You can control cookies through your browser settings. Some website interface libraries are loaded from third-party content delivery networks, which receive normal browser request information such as your IP address.

Mobile app analytics

Production Android versions containing our Firebase Analytics integration use Google Analytics for Firebase to understand app usage and improve VNBILL. Collection is enabled when the app starts, including before sign-in. This integration is not currently enabled in our iOS app or development builds.

The SDK processes an automatically generated app-instance identifier, app version, device and operating-system information, language, approximate location derived from network information, and standard usage events such as first opens, sessions and engagement. These identifiers distinguish app installations; they are not your VNBILL username. We do not request precise GPS location for analytics. Google receives analytics information to provide this service. See Google's Analytics data collection explanation and Privacy Policy.

Our integration does not send customer names, contact details, invoice contents, passwords, OTPs or authentication tokens as analytics event data, and does not assign your VNBILL account ID as an Analytics user ID. Android Advertising ID and Android ID (SSAID) collection are disabled in our Analytics configuration, as are advertising storage, advertising user-data consent and personalised-advertising signals. Disabling advertising features does not disable standard app-usage analytics or its app-instance identifier.

Analytics information may be processed on Google's infrastructure outside India. Retention is governed by the Analytics property's retention settings and Google's applicable service terms; aggregated reports may be retained separately. Signing out or deleting your VNBILL profile does not automatically erase analytics events already collected. There is currently no in-app Analytics opt-out switch, and browser cookie settings do not control the native SDK. For analytics privacy or deletion requests, contact admin@vyantech.com. We will explain what information can be identified and acted on; because we do not attach your VNBILL account ID to analytics, we may not be able to locate past events from your username alone.

Spam protection

This site uses Google reCAPTCHA to protect demo requests against automated abuse. Google may process device, browser and network information for this purpose. The Google Privacy Policy and Terms of Service apply.

Retention and security

Account and business information is retained to provide the service and meet applicable accounting, tax, security and other obligations. Enquiries and support correspondence are retained for follow-up and legitimate business records. Authentication-token expiry does not by itself erase related audit logs or business records. We limit retention to the relevant purposes and obligations and explain applicable retention exceptions when processing deletion requests. Backup copies, where maintained, are subject to the applicable backup retention process rather than necessarily being erased at the same time as active records.

Production app communications use HTTPS. Organisation permissions, session controls and protected credential storage help restrict access. No online service can guarantee absolute security. Keep your credentials private and report suspected unauthorised access promptly.

Personal account and data deletion

In the mobile app, open Profile → Delete my personal profile. You can also use our account-deletion form without installing the app. Verify your username@organisationShortName and password, complete the configured email/WhatsApp OTP check when enabled, and explicitly confirm deletion. Do not send passwords or OTPs by email. If verification is unavailable, contact admin@vyantech.com for assistance.

Personal deletion is immediate after successful verification and confirmation: we remove your profile contact details and sign-in credentials, replace your username with a non-identifying deleted-user reference, remove account sessions and account-specific authentication records, and end access on all devices. Organisation invoices, other business records and necessary creator/audit references are not deleted. Business documents containing information entered independently of your profile, exported copies, support correspondence, infrastructure logs and backups are subject to the retention arrangements above. Contact us to identify any additional personal information requiring review.

The last active organisation Admin cannot delete their profile until another active Admin is appointed. Alternatively, use the separate organisation-closure route below. A personal deletion request never automatically authorises closing the organisation or deleting other users' records.

Organisation closure — administrator requests

Only an active organisation Admin may request closure of their own organisation through the authenticated organisation-closure form, also linked from the app's Profile section. Export any records you need first. Closure requires fresh password verification, the configured OTP check when enabled and explicit confirmation.

  1. Confirmation records the request and immediately suspends the organisation's business access, revoking existing sessions. The form displays the request reference and the 20-calendar-day cancellation deadline.
  2. We send separate notification emails to active Admins with registered valid email addresses, identifying the initiating Admin. Operational notifications go separately to nitin@nantech.solutions and admin@vyantech.com. Other recipients' addresses are not exposed. Email delivery failures do not undo a submitted request; keep the on-screen confirmation.
  3. Before the deadline, any active Admin of that organisation may use the closure cancellation/reactivation form with fresh password and configured OTP verification. It works while the organisation is suspended, without granting access to business records. Confirmation cancels closure and automatically restores access only if the suspension is still solely due to that request. A separate security or administrative restriction requires support assistance. Users must sign in again. Admins and the operations team receive cancellation notifications.
  4. After the cancellation period, permanent deletion requires SuperAdmin approval and manual processing within three working days (Monday–Friday, excluding Karnataka public holidays). It does not occur automatically on day 20. We confirm completion and identify any information retained for applicable obligations. Backup retention is separate; day 20 is not a promise that all backup copies or legally retained records have been erased.

Your other choices

You may ask us to correct information, delete enquiry information, withdraw consent for further enquiry-related contact, or raise a privacy concern by emailing admin@vyantech.com. We will verify requests where necessary and explain any information we must retain. Withdrawal does not undo processing already completed. Your organisation administrator can also help with business-record corrections and account access.

Contact and changes

VYAN Consultancy Services
Bengaluru, Karnataka, India — 560108
+91 70198 90911

We may update this policy as the website and service evolve. The date above identifies the latest version.