Privacy Policy

Last updated September 2026

This policy explains what Billing Pie collects when you use EcomTools, and what we do with it. The short version is that the files you process never reach us at all.

Your documents never leave your device

Every tool on this site runs inside your browser tab. When you open an order PDF to crop labels, that PDF is read by your own computer. It is not uploaded, not stored, and not seen by us or by anyone else. The same is true of the images you resize, the invoices you generate and the customer names and addresses printed on your labels.

This is enforced by the browser, not only promised by us: the site declares a Content Security Policy that permits connections to our own API and nothing else, so a page here cannot send your file anywhere even if it tried.

Because we never receive these files, we cannot produce them on request, restore them, or hand them to anybody.

What we do collect

Your account. Your mobile number, which identifies the account; the name and business name you give at sign-up; and your email address if you provide one. Your email is used for payment receipts and important notices about the service.

Sign-in records. When we send a verification code we store a one-way hash of it, never the code itself, together with the time and the IP address the request came from. These are kept briefly and exist to stop the code system being abused to message strangers.

Sessions. When you sign in we store a hash of a random session token, with the time, your IP address and your browser's user agent, so you can be signed out everywhere if the account is compromised.

Payments. What you bought, when, and the payment reference from Razorpay. We do not receive or store card numbers, UPI IDs or bank details - those go directly to Razorpay.

Usage counts. Which tool was used and how long it took, as numbers only. This is deliberately built so that it cannot carry a file name, a document, or anything from inside your files.

Why we are allowed to hold it

We hold your account details to provide a service you asked for, payment records because tax law requires it, and sign-in and session records because we have a legitimate interest in keeping accounts secure and our messaging costs bounded.

Who else sees it

We do not sell your data and we do not share it for advertising. It reaches three kinds of company, each doing a specific job for us:

We may also disclose information where the law requires it.

How long we keep it

Account and payment records are kept while your account exists and for as long afterwards as tax and accounting rules require. Verification codes are deleted within days. Sessions expire, and are removed after they do.

Your choices

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete your account. Write to [email protected] from the email on your account, or message the mobile number registered to it. We may need to verify it is you before acting.

Deleting your account ends any remaining plan and is not reversible.

Cookies

We set one cookie, and only after you sign in: it holds your session token so you stay signed in. It is marked HttpOnly, so scripts cannot read it. We do not use advertising or tracking cookies.

Children

This is a tool for registered sellers and is not directed at anyone under 18.

Changes

If this policy changes we will update the date at the top, and tell you where the change is significant.

Questions about this page? Message us on WhatsApp or email [email protected].