Legal
Privacy Policy
Most software collects more than it needs to and says less than it should about it. This page tries to do the opposite: exactly what is collected, by which part of the product, and why.
1. Who this is about
This policy is published by Lighthouse Ventures, a sole proprietorship registered at 112/3, Prabhat Road, Pune 411004, Maharashtra, India, which builds CalcyBill™. It covers two separate things, described separately because they behave differently: this website, and the CalcyBill™ desktop application.
2. This website
What it collects
Only what you type into a form, and only when you submit it: the contact form, the licence request form, and the partner application. Between them, that can include your name, email, phone number, business or shop name, trade, the number of tills, a GSTIN if you choose to give one, and whatever you write in a message or notes field.
What it is used for
Solely to do the thing the form says it will do: reply to your message, verify and issue a licence, or evaluate a partner application. It is not sold, rented, or handed to a third party for their own marketing, and it is not combined with data from anywhere else to build a profile of you.
What it does not do
This website does not run third-party analytics or advertising trackers, and it does not set tracking cookies. The one thing stored in your browser is your light/dark theme choice, in localStorage on your own device — it is never sent to us, and clearing your browser data clears it. Every form on the site carries a hidden field and a timing check to catch automated spam; neither reads anything about you, and neither involves a third-party CAPTCHA service seeing your traffic.
Digital delivery & downloads
See the Digital Delivery Policy for exactly how the installer and a licence key reach you — no separate personal data is collected for delivery beyond the licence request details above.
3. The CalcyBill™ desktop application
CalcyBill™ keeps its database in a file on your own machine, at %APPDATA%\CalcyBill\. Bills, stock, customers, staff records and everything else you enter live there and only there. Nothing about your shop, your customers, or your sales is transmitted to Lighthouse Ventures or to anyone else by the software itself — see What it doesn’t do for the honest list of what it never phones home about.
4. CalcyBill™ Cloud — the one part that is optional and online
Cloud is switched off by default. If a shop turns it on:
- A bill commits to the local database first; the same bill’s totals are then uploaded in the background, so the owner can see combined sales across branches on their phone. Turning Cloud off stops this entirely — the till does not notice.
- A counter connects with the shop’s own passphrase, typed once. From then on every request carries a device token instead — not the passphrase. That token is encrypted by Windows itself; our server keeps only a one-way hash of it, not the token, and cannot recover it.
- Every request to the server carries that token, and the server derives which shop and branch it belongs to from the token alone — a device can never ask for another shop’s data, because it never gets to name one.
- If a shop is given its own email-and-password login for the owner’s dashboard (rather than sharing the passphrase above), that email and a salted, one-way hash of the password are stored on our server. The password itself is never stored and cannot be recovered from the hash.
- Each sale carries an ID unique to the shop, so a retried upload after a dropped connection is recorded once, not twice.
What reaches the server, then, is limited to invoice totals and stock movements needed to show combined sales and low-stock alerts on the owner’s phone — not customer personal data beyond what a bill already carries (which stays primarily local, per What it doesn’t do).
5. How long data is kept
Website form submissions are kept only as long as needed to handle your enquiry, issue and support your licence, or as required by tax and business record-keeping law — whichever is longer — and are not kept for any purpose beyond that. Data inside CalcyBill™ on your own machine is kept for as long as you keep it there; it is yours, and deleting it is a matter of your own backups and files, not a request to us.
6. Your rights
You can ask what personal data we hold about you, ask us to correct it, or ask us to delete it (where we are not required to keep it for legal or accounting reasons) by writing to support@calcybill.com.
7. Security
Reasonable technical and organisational measures are used to protect the data described above. No transmission over the internet or method of electronic storage is completely secure, and this policy cannot promise otherwise — CalcyBill™’s own answer to that risk, for the data that matters most, is to keep it on your machine in the first place rather than transmit it at all.
8. Children
This website and CalcyBill™ are intended for use by businesses and adults acting on a business’s behalf, not by children.
9. Changes to this policy
If what is collected or why ever changes, this page is updated and the date above changes with it.