Privacy Policy

1. Who we are

Online Scope runs Generate Invoice. Under India's Digital Personal Data Protection Act, 2023 (the DPDP Act) that makes us the “Data Fiduciary” for the small amount of personal data described here. Big title, tiny job.

2. What stays on your device (almost everything)

Your drafts, your business details, the invoices you download, your saved clients and items, and your logo and signature are kept in your browser (its local storage and IndexedDB) on your device. PDFs are made right there too. None of it is sent to us. We couldn't peek if we tried, and we did not try.

• It stays in that browser on that device. Another browser starts empty.
• Clear your browser data and it's gone for good. We can't restore it, because we never had it. Use Backup in “My invoices” to keep a copy as a file on your device.
• You can delete single invoices, clients and items, or everything at once with “Clear all history on this device”.
• Anyone who uses your browser profile can see it. Lock your device. Your cat counts.
• Share hands the PDF made on your device to your phone's share sheet (WhatsApp, email and so on). We don't upload it.

3. What we never collect

• No accounts, no sign-up, no passwords. We don't know who you are, and that's fine.
• No payments. The tool is free, so there is no payment gateway and no card details. You couldn't pay us if you tried.
• No ads, no selling or renting of data, no data brokers, no “partners”.
• No copy of your invoices, clients or business details on our servers. So, no AI trained on them either.

4. Analytics, only if you say yes

We use Google Analytics 4 to see which pages people visit and which buttons they press (like “PDF downloaded”), so we know what to improve. It only runs if you tap “Allow”. Say no and the page works exactly the same; we just stay a bit more clueless.

• If allowed, Google receives: the page address (with any search or ID bits removed), your browser and device type, a rough location worked out from your IP address, and a cookie (_ga) that tells one visit from the next.
• Google never receives your invoice, client names, amounts, GSTIN, bank details or anything else you type. Google Signals and ad personalisation are switched off.
• Google keeps this data for the retention period set in our Google Analytics account (14 months at most). Google processes it under its own privacy policy (policies.google.com).
• Do Not Track or Global Privacy Control in your browser means a polite no: we don't even ask.

5. Search engine tools

We use Google Search Console and Bing Webmaster Tools to see how the site shows up in search results (which searches lead here, how often people click). These reports come from Google's and Microsoft's search engines. They don't run on this site and don't track your visit here.

6. Hosting and email

Hosting: Vercel Inc. delivers the website. Like every web server, it sees technical request data (IP address, browser, the page asked for) and keeps short-lived logs to keep the site running and secure. Those requests never contain your invoice details.

Email: if you write to us, we get whatever you put in the email. We use it to reply and delete it when it's no longer needed. Please don't send us invoices; describe the problem instead.

7. Cookies

None, unless you allow Google Analytics, which sets its _ga cookies. Turn it off and we delete them.

8. Your rights under the DPDP Act

For the personal data we hold about you (analytics, if allowed, and your emails), you can:

• ask what we hold and how we use it;
• ask us to correct, update or erase it;
• withdraw your consent to analytics at any time, as easily as you gave it (the buttons above);
• nominate someone to act for you if you can't;
• raise a grievance by emailing info@onlinescope.in with “Privacy” in the subject. We reply as soon as we can, and within the time the DPDP Rules allow. If you're not satisfied, you can complain to the Data Protection Board of India.

Everything on your device you can see, change or delete yourself, in seconds, without asking anyone.

9. Children

If you're under 18, please don't tap “Allow” on analytics. Ask a parent to help with the invoicing. They will be thrilled.

10. Security

The site is served over encrypted HTTPS. Your invoices are only as safe as your device, so keep it locked and keep backup files somewhere sensible.

11. Changes

If we change how we handle data, we update this page and the date at the top first. If we ever want to collect something new, we'll ask you before we do.