Privacy policy

Information we collect

• Account data: your name, email address and a hashed password.
• Business data you enter: company details such as GSTIN, PAN, address, bank and UPI details, plus clients, products, quotations, invoices, payments and notes.
• Files: the logo and signature you upload and the invoice or quotation PDFs you generate.
• Technical data: session information, IP address and browser user agent, used for sign-in security, rate limiting and the activity log.

How we use it

• To provide the service: creating, storing, sharing and exporting your documents.
• To secure accounts: sign-in, session management, abuse prevention and audit logs.
• To send essential emails, such as password reset links.

We do not sell your data, we do not show advertising, and the product does not currently use third-party analytics or advertising trackers.

Where data is stored and who processes it

Your data is stored on Cloudflare infrastructure (database, file storage and application hosting). Transactional email is sent through Resend. These providers process data only to deliver the service.

Cookies and local storage

We use a strictly necessary session cookie to keep you signed in, and your browser stores your light or dark theme choice. We do not use advertising cookies.

Sharing links

If you enable sharing on an invoice or quotation, anyone who has the private link can view it. You can switch sharing off at any time from the document page.

Your organization's data

Each organization's records are kept separate and are only visible to its members according to their role. Organization admins control who has access.

Your choices

• Export your invoices, quotations, clients and products as CSV from the app.
• Edit or remove records inside the app.
• Ask us to delete your account and data by emailing contact@hostspica.com.

Security

We use role-based access control, rate-limited sign-in, encrypted connections and an activity log. No system is perfectly secure, so please use a strong, unique password.

Children

The service is intended for businesses and is not directed at children.

Changes and contact

We may update this policy and will change the date above when we do. Questions: contact@hostspica.com.