Privacy Policy

Effective October 28, 2026

OpenBahi provides business dashboards and synchronization tools for accounting information. This policy explains what information we process and why.

Information we collect

We process account information such as your name, business name, email address, phone number, city, GSTIN when supplied, and authentication details. If you request a callback without creating an account, we process the details described under “Callback requests” below. When you use Google sign-in, Google provides your verified email address and basic profile information. When you use Sign in with Apple, Apple provides your name if you choose to share it and either your email address or a private relay address that forwards to it. We also process accounting data that an authorized user connects through the OpenBahi sync application, along with device, sync-status, and security logs needed to operate the service.

Usage analytics

When a signed-in user uses the OpenBahi dashboard, we record which screens are opened, which detail sheets and tabs are viewed, which buttons are pressed, that a search box was used, how long each screen was visible while in use, and how long screens and data take to load (with the connection type the browser reports, such as 4G). Each record also holds the login and company it belongs to, the time, a random session code, and whether the dashboard was used on a phone, a computer, or as an installed app. We do not record party names, amounts, invoice details, or the text typed into search boxes. Activity is not recorded while an OpenBahi administrator views a business account for support.

We use these records only to understand which parts of OpenBahi are used and to improve the product. They are visible only to OpenBahi administrators, who see them per company and per login. Individual records are kept for 90 days; after that we keep only daily totals per login and company, for as long as the company's account exists.

Callback requests

If you use “Request a callback” on our website, we store your name, mobile number, and, if you provide them, your business name, city, accounting software, and question, along with the time of the request and your consent to be contacted. If you send another request from the same number within 24 hours, we keep the details you gave first and add the new question, with its time, underneath. We also record the IP address your request came from, only to limit repeated or automated requests; it is cleared after 30 days.

We use callback requests only to call or WhatsApp you back about your request. They are visible only to OpenBahi administrators, are kept separately from every customer's business data, and are deleted 12 months after the request was made.

OpenBahi mobile app (Android and iPhone)

The OpenBahi apps for Android (package com.openbahi.app) and iPhone and iPad (App Store, bundle com.openbahi.app) show the same OpenBahi dashboard you see at app.openbahi.com, inside an app on your phone. Everything in this policy applies to it. The app is free, has no advertising, and does not sell or rent your information. It asks for phone permissions only for the features below, and only when you use them.

• Camera. Used only when you add a photo to a lead and choose to take it with the camera. You can choose a photo from your gallery instead. The photo is uploaded to your business account, is visible only to the users of that account, and is not shared with anyone else.
• Location. Used only when you press the button to mark a lead or customer location. The app reads your position once at that moment and saves the coordinates and their accuracy against that lead or customer in your business account. It does not track you, does not read your location in the background, and does not share it with other businesses.
• Files and sharing. When you save or share an invoice, statement, or ledger PDF, the app writes that PDF to your phone's Documents folder or hands it to the share sheet (for example WhatsApp or Files). The app does not read your other files.
• Notifications. If you turn them on, the app registers your phone with Google's Firebase Cloud Messaging (on iPhone, through Apple's Push Notification service) and we store the notification token against your login. We use it only to tell you about your own business: payments received, bills that fall overdue, the day's summary, a stopped sync and, if you choose, new invoices. You choose which ones and your quiet hours in Profile & settings; turning notifications off for OpenBahi in your phone's Settings stops them all. Signing out removes this phone's token.
• Face ID and Touch ID (iPhone). If you turn on the lock, the iPhone app keeps your sign-in encrypted with a key held in the phone's Keychain that iOS releases only after Face ID or Touch ID, and asks for it when the app opens and when you come back to it after a few minutes away. Your face or fingerprint never leaves your phone and OpenBahi never sees it. Turning it off deletes the key; signing out or deleting your account deletes the key and your sign-in from the phone.
• Fingerprint unlock. If you turn it on, the app keeps your sign-in on your phone encrypted with a key that your phone's secure hardware releases only after your fingerprint (or your face, on phones where Android rates face unlock as secure), and asks for it when the app opens and when you come back to it after a few minutes away. Your fingerprint or face never leaves your phone and OpenBahi never sees it. The key and the encrypted sign-in stay on your phone and are never sent to us. Turning it off in Profile & settings deletes the key; signing out or deleting your account deletes the key and your sign-in from the phone.
• Google sign-in. If you choose “Continue with Google”, sign-in opens in your phone's browser and Google gives OpenBahi your verified email address and basic profile information. We never see your Google password. You can also sign in with an email and password.
• Sign in with Apple. If you choose “Continue with Apple”, sign-in opens in your phone's browser and Apple gives OpenBahi a user identifier, your name if you choose to share it, and your email address or a private relay address that forwards to it. We never see your Apple Account password. You can link your Apple ID to an existing OpenBahi login in Profile & settings, Security.
• Internet. The app needs an internet connection to load your dashboard. Data travels over encrypted connections (HTTPS). Without a connection, the app shows the figures it last saved on your phone, marked as offline, and sending, PDFs, reminders and saving are not available until you are back online. Nothing extra is sent to us for this. Signing out removes the saved figures from your phone.

The app does not include advertising or third-party tracking code, and does not use your phone's advertising ID. The usage analytics described above apply to the app in the same way as to the website, and also record the app's version number. Information you give through the app is processed by the same service providers listed below.

You can delete your OpenBahi login yourself, immediately, in the app or on app.openbahi.com (Profile & settings, Security, Delete my account), or by email as described on How to delete your account; after an in-app deletion your data is removed from our backups within a further 30 days. If you are the only owner of a company account, that company is switched off and its books are deleted after 30 days unless [email protected] is contacted before then. You can turn the camera, location and notification permissions off at any time in your phone's Settings; the rest of the app keeps working.

AI assistant (trial)

Some businesses are trying an AI assistant in the OpenBahi dashboard (“Pucho”). Only signed-in users of that firm can ask it questions, and it answers from that firm's own data in OpenBahi. Answers are generated by an AI model (Microsoft Azure OpenAI), which receives the question, the recent messages of that chat, and the firm's figures needed to answer it. Answers can be wrong, so check important figures on the dashboard.

We store the questions and answers, and any thumbs up or thumbs down you give, for up to 180 days, to check the quality of the answers. The usage analytics described above record only that the assistant was opened, that a question was sent, and that an answer was rated, never the text of a question or an answer. For questions about the assistant, email [email protected].

How we use information

We use this information to authenticate users, create and operate business dashboards, synchronize connected accounting records, provide support, prevent abuse, and maintain the reliability and security of OpenBahi. We do not sell personal information.

Service providers

OpenBahi uses service providers including Supabase for authentication and hosted data services, Cloudflare for website delivery and security, and Google when you choose Google authentication. If a business switches on WhatsApp invoices or reminders, Meta's WhatsApp Business platform delivers those messages and receives the recipient's phone number and the PDF being sent. If a business uses the AI assistant trial, Microsoft Azure OpenAI generates its answers as described above. These providers process information under their own terms and privacy commitments.

Access and sharing

Business data is available only to authenticated users who have been granted access to the applicable OpenBahi business account. We may disclose information when required by law, to protect the service and its users, or to vendors acting on our behalf.

Retention and security

We retain information while an account is active and as reasonably necessary for security, support, legal, and operational purposes. We use access controls, encrypted transport, and restricted credentials, but no online service can guarantee absolute security.

Your choices

You may update account details, change authentication credentials, disconnect synchronization, or request account and data deletion as described on our account deletion page. You may also ask us to remove a callback request or stop contacting you, and you may revoke OpenBahi's Google access from your Google Account settings.

Contact

OpenBahi is a sole proprietorship registered with the Ministry of MSME, Government of India (Udyam registration UDYAM-RJ-17-0691221), A-9, Vikas Nagar, Path No. 7, Dher Ke Balaji, Murlipura, Sikar Road, Jaipur, Rajasthan 302039, India.

For privacy questions or account requests, email [email protected].