Privacy Policy

Aaroora ("we", "us") operates aaroora.com and books.aaroora.com. This policy explains what data we collect, why we collect it, and your rights over it.

1. Data we collect

Account data

When you sign up we collect your name, email address, mobile number, and business details (business name, GSTIN, address, PAN). This is necessary to provide the service.

Invoice and transaction data

Invoice data you create — customer names, GST numbers, line items, amounts — is stored on our servers to deliver the core product. This data belongs to you.

Usage data

We collect logs of actions you take within the app to improve the product and diagnose issues. This data is not sold.

Payment data

Subscription payments are processed by Razorpay. We store only the transaction ID and plan details — we never see or store your full card or bank account details.

Device and browser data

We collect standard server logs: IP address, browser type, operating system, and referring URL. Used for security monitoring and aggregate analytics only.

2. How we use your data

• To provide, maintain, and improve the Aaroora service
• To send transactional emails (invoices, receipts, password resets)
• To send product updates and billing notifications — you can opt out at any time
• To respond to support requests
• To comply with applicable law, including GST regulations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Data storage and security

Your data is stored on servers in India (AWS Mumbai region). We use AES-256 encryption at rest and TLS 1.2+ in transit. If we become aware of a breach affecting your data, we will notify you within 72 hours.

4. Data retention

We retain your account and invoice data for as long as your account is active, plus 7 years after closure (as required for GST compliance). You may request deletion of non-statutory data at any time.

5. Your rights (DPDP Act 2023)

Under India's Digital Personal Data Protection Act, 2023, you have the right to access, correct, and erase your data, and to lodge a grievance with our Data Protection Officer. Email hello@aaroora.com — we will respond within 30 days.

6. Cookies

We use essential cookies to keep you logged in. We use first-party analytics cookies to understand how the product is used. We do not use third-party advertising cookies.

7. Third-party services

• AWS — cloud infrastructure, India region
• Razorpay — payment processing
• MSG91 / Twilio — transactional SMS and WhatsApp delivery

8. Changes to this policy

If we make material changes, we will notify you by email or in-app notice at least 14 days before the change takes effect.

9. Contact

Email: hello@aaroora.com
Bengaluru, Karnataka, India