Privacy Policy

Account and company data: company name, login username, email address, password (stored in hashed form), NTN/STRN, province, address, business activity, sector, and billing/subscription records.

Operational data: products, customers, invoices, line items, FBR scenario selections, validation/submission logs, FBR invoice numbers returned by PRAL, and PDFs generated by the Service.

FBR configuration: sandbox/production environment setting and encrypted PRAL security tokens you provide.

Technical data: server logs, IP addresses, browser/device type, and timestamps needed for security, debugging, and service operation.

We use information to:

• Provide, maintain, and secure the Service
• Authenticate your company account and manage subscriptions
• Validate and submit invoice data to FBR/PRAL at your direction
• Generate invoice PDFs and compliance records for your business
• Respond to support requests and service notices
• Detect abuse, fraud, and unauthorized access

We do not use your invoice or customer data to train AI models. We do not sell personal or business data to advertisers.

You are responsible for ensuring you have the right to enter customer and invoice data into the Service and to transmit it to FBR. You must provide accurate information and comply with applicable Pakistani law, including tax and data-protection obligations relevant to your business.

We share data only as needed to operate the Service, including with:

• FBR / PRAL when you validate or submit invoices (official digital invoicing gateway)
• Hosting and database providers (e.g. cloud servers, PostgreSQL/Supabase) to store and run the application
• Email providers for account verification and service emails
• Payment verification when you submit payment proof for subscription activation (manual review)

We may also disclose information if required by law, court order, or to protect rights, safety, and security of users and the Service.

We retain account and invoice data while your subscription is active and for a reasonable period afterward so you can export records or resolve billing issues. You may request account closure and data export by contacting us. We may retain minimal logs as required for legal, security, or accounting purposes.

We use administrative and technical measures appropriate to a small business SaaS product, including encrypted storage of FBR tokens, access controls, and HTTPS in production. No method of transmission or storage is completely secure; you are responsible for safeguarding your company login and PRAL tokens.

The Service uses session cookies and similar technologies to keep you signed in and to protect your account. We do not use third-party advertising cookies on the application.

You may access and update most company data through the dashboard. To request correction, export, or deletion of account data, email support@bizbill.pk. We will respond within a reasonable time, subject to legal retention requirements.

The Service is for businesses and is not directed at children under 18. We do not knowingly collect data from minors.

Your data may be processed on servers located outside Pakistan depending on our hosting and database providers. By using the Service, you consent to this processing for the purpose of providing the Service.

We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates the current version.

Privacy questions: support@bizbill.pk.

BizBill is independent commercial software. Not affiliated with, endorsed by, or operated by the Federal Board of Revenue (FBR) or Pakistan Revenue Automation Limited (PRAL).