Privacy Policy

1. Introduction

Fylo Technologies ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered GST invoice management service ("Fylo" or "the Service").

2. Information We Collect

2.1 Account Information

• Email address and name
• Business name and GSTIN (GST Identification Number)
• Business address and contact details
• Account preferences and settings

2.2 Invoice Data

• Uploaded invoice images and PDFs
• Extracted invoice information (amounts, dates, party details)
• GST details (CGST, SGST, IGST, HSN/SAC codes)
• Seller and buyer information from invoices

2.3 Usage Data

• Log data (IP address, browser type, access times)
• Device information and identifiers
• Feature usage and interaction patterns
• Error logs and performance data

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process invoices using AI-powered extraction
• Generate GST reports and analytics
• Send service-related notifications and updates
• Respond to support requests and inquiries
• Detect, prevent, and address security issues
• Comply with legal obligations

4. AI Processing

When you upload invoices, we use third-party AI services (including Anthropic Claude) to extract data. This involves:

• Sending invoice images/PDFs to AI providers for processing
• AI providers may temporarily process your data but do not retain it
• We do not use your invoice data to train AI models
• Extracted data is stored securely in our database

5. Data Storage and Security

We implement industry-standard security measures:

• Data encryption in transit (TLS/SSL) and at rest (AES-256)
• Secure cloud infrastructure hosted on trusted providers
• Row-level security ensuring users can only access their own data
• Regular security audits and vulnerability assessments
• Access controls and authentication measures

Your data is stored on servers located in secure data centers. We retain your data for as long as your account is active or as needed to provide the Service.

6. Data Sharing

We do not sell your personal information. We may share data with:

• Service Providers: Third parties that help us operate the Service (cloud hosting, AI processing, analytics)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

7. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your data in a portable format
• Objection: Object to certain processing activities

To exercise these rights, contact us at support@getfylo.app

8. Cookies and Tracking

We use essential cookies for authentication and session management. We may use analytics tools to understand how the Service is used. You can control cookie settings through your browser preferences.

9. Data Retention

We retain your data for as long as your account is active. After account deletion, we may retain certain data for up to 90 days for backup purposes and to comply with legal obligations. Invoice data may be retained longer if required for tax compliance purposes.

10. Children's Privacy

Fylo is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will take steps to delete it promptly.

11. International Data Transfers

Your data may be processed in countries other than India. We ensure appropriate safeguards are in place for any international transfers, including using service providers that comply with applicable data protection standards.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through the Service. Your continued use after changes indicates acceptance of the updated policy.

13. Contact Us

For privacy-related questions or concerns, contact us at: