Privacy Policy

What we collect

• Your account: the mobile number or email you sign in with.
• Your business: name, address, GSTIN, bank or UPI details you choose to add, and your invoice settings.
• Your clients: names, mobile numbers, emails and GSTINs that you enter, plus a record that you confirmed they agreed to receive invoices and reminders.
• Your invoices and payments: items, amounts, dates, payment confirmations, and a log of the emails and messages we send for you.

How we use it

Only to run the service: to create and send your invoices, remind your clients, record payments, send receipts, keep your account secure, and support you. We do not sell your data or your clients' data, and we do not use it for advertising.

Connecting your Gmail

If you choose to connect Gmail, you give Ruba permission to send email as you (the Gmail “send” permission). We use it only to send your invoices, reminders and receipts to your clients. We cannot read, search, change or delete anything in your mailbox. The access key Google gives us is stored encrypted and is used for nothing else. You can disconnect at any time in Settings, or remove access in your Google account at myaccount.google.com/permissions.

Ruba's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Who else handles the data

• Supabase, which stores our database in Mumbai, India.
• Netlify, which hosts the website.
• Google, if you connect Gmail or we send email through Gmail.
• Payment providers such as Razorpay, only if you connect your own account.

Each business can see only its own data. Our team sees counts and account activity, not your clients, invoice contents or bank details.

Keeping it safe

Connections are encrypted, access is limited by strict rules in the database, secrets are stored encrypted, and administrator access needs two-step verification.

Your choices

• See or export your data from Settings.
• Correct it at any time.
• Ask us to delete your account. We keep issued invoice records for the period the law requires, then delete them.
• Clients can reply STOP to stop messages.

Changes

If we change this policy in a way that matters, we will tell you in the app or by email.