PaystaraPaystara

Legal

Privacy Policy

Last updated: 12 October 2026

1. Who we are

This Privacy Policy explains how Paystara, Mumbai, Maharashtra, India ("Paystara", "we") handles personal data when you use paystara.in and the Paystara software. We follow the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 as they apply to us.

"User" means a person or business that signs up for a Paystara account. "Client" means someone a User invoices, whose details (name, phone, email) the User adds to Paystara.

2. What we collect

  • Account details: your name, email, and a hashed password, or your Google sign-in details if you use Google.
  • Business details you add: business name, address, GSTIN, state, bank or UPI details, and, if you choose, your Razorpay keys.
  • Invoice and contract data: amounts, dates, descriptions, and the details of your Clients that you enter, such as name, email, phone number, GSTIN and state.
  • Payment information: whether an invoice or a Paystara plan has been paid. We do not see or store your card or UPI PIN; card and UPI payments are handled by Razorpay.
  • Contract signing records: the signer's name, date, time and IP address.
  • Usage and device data: IP address, browser, device and timestamps, used for security and to keep the Service working.
  • Messages you send to our support team.

3. How we use it

We do not sell personal data.

  • To provide the Service: create invoices and contracts, send them and payment reminders on your behalf, and detect payments.
  • To process payments for your Paystara plan and to send you account and billing emails.
  • To keep the Service secure, prevent fraud and abuse, and fix problems.
  • To answer your support requests and to improve the product.
  • To meet legal, tax and accounting duties.

4. Your Clients' data

When you enter your Clients' details into Paystara, you decide why and how they are used. You are responsible for having the right to share those details with us and to contact your Clients by email and WhatsApp. We use that data only to provide the Service to you, on your instructions. If a Client wants their data corrected or removed, they can contact the User or write to us.

5. Who we share data with

We share data only with service providers that help us run Paystara, and only as needed to do so. These include providers of:

  • payments (Razorpay);
  • email delivery (Resend);
  • database and file storage (Supabase) and server hosting;
  • WhatsApp Business messaging.

6. Other disclosures

We may disclose data if the law requires it, to respond to a lawful request from a court or authority, to protect our rights or users' safety, or in connection with a merger, sale or transfer of the business, in which case we will make sure the data stays protected.

7. Storage outside India

Some of our providers may store or process data on servers outside India. Where this happens, we take steps to protect the data and follow the rules that apply under Indian law.

8. Cookies and browser storage

We use your browser's storage to keep you logged in and to remember your settings. If we add analytics or similar tools in future, we will update this policy.

9. Security

We use reasonable security safeguards, including encrypted connections (HTTPS), hashed passwords and access controls. No system is perfectly secure. If a personal data breach affects you, we will tell you and the authorities as the law requires.

10. How long we keep data

We keep your data while your account is active. Invoices, contracts and billing records may be kept for as long as the law requires for tax and accounting. When you ask us to delete your data, we will delete or anonymise it, except what we must keep by law.

11. Your rights

You can ask us to:

  • tell you what personal data we hold about you;
  • correct or complete your data;
  • delete your data and close your account;
  • withdraw consent you have given us;
  • address a complaint or grievance.

12. Children

Paystara is for business use by adults. It is not meant for anyone under 18, and we do not knowingly collect data from children.

13. Grievance Officer

If you have a complaint about how we handle your data, write to our Grievance Officer: Sankalp, Founder, Paystara, Mumbai, Maharashtra, India. Email: support@paystara.in. We will acknowledge your request and aim to resolve it within 30 days.

14. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, for important changes, tell you by email or in the app.

15. Contact

Questions about privacy? Write to support@paystara.in.