Privacy Policy

Last updated September 2026

This policy explains what Billing Pie collects when you use EcomTools, and what we do with it. The short version is that the files you process never reach us at all.

Your documents never leave your device

Every tool on this site runs inside your browser tab. When you open an order PDF to crop labels, that PDF is read by your own computer. It is not uploaded, not stored, and not seen by us or by anyone else. The same is true of the images you resize and the invoices you generate.

This is enforced by the browser, not only promised by us: the site declares a Content Security Policy that permits connections to our own API and nothing else, so a page here cannot send your file anywhere even if it tried.

Because we never receive these files, we cannot produce them on request, restore them, or hand them to anybody.

The one thing we do store for you: your scan list

Order scan check is the single tool that keeps anything taken from your orders, and only when you press the button that says so. Your desktop reads the label PDF and builds the day’s packing list; to scan that list on your phone, the list itself has to reach us. The PDF does not.

What we store per parcel: the barcode, the order number, the buyer’s name, the delivery city, state and pincode, the SKU and quantity, the courier and marketplace, and the value printed on the invoice.

What we deliberately do not store: the buyer’s street address, and the buyer’s phone number. City and state answer every question the tool and its reports need to answer; the rest would turn a despatch record into a customer database, which this is not.

We use it to show you your own list and nothing else. It is never sold, never shared, and never used to build a profile of you or of your buyers. It is deleted after 12 months, and you can delete any day of it yourself at any time.

If you never open Order scan check, we hold nothing from your orders at all.

What we do collect

Your account. Your mobile number, which identifies the account; the name and business name you give at sign-up; and your email address if you provide one. Your email is used for payment receipts and important notices about the service.

Sign-in records. When we send a verification code we store a one-way hash of it, never the code itself, together with the time and the IP address the request came from. These are kept briefly and exist to stop the code system being abused to message strangers.

Sessions. When you sign in we store a hash of a random session token, with the time, your IP address and your browser's user agent, so you can be signed out everywhere if the account is compromised.

Payments. What you bought, when, and the payment reference from Razorpay. We do not receive or store card numbers, UPI IDs or bank details - those go directly to Razorpay.

Usage counts. Which tool was used and how long it took, as numbers only. This is deliberately built so that it cannot carry a file name, a document, or anything from inside your files.

Messages you send us. If you write to us through the form on our contact page, we keep what you wrote and the topic you chose, together with the name, email address and mobile number you filled in - we have no other way to answer you. We also record which page you came from, your browser's user agent and your IP address: the first two are usually what makes a reported bug reproducible, and the last is how we keep the form from being used to send strangers spam. Nothing is attached to it and nothing can be, so none of the files you were working on goes with it.

Why we are allowed to hold it

We hold your account details to provide a service you asked for, payment records because tax law requires it, and sign-in and session records because we have a legitimate interest in keeping accounts secure and our messaging costs bounded.

Who else sees it

We do not sell your data and we do not share it for advertising. It reaches three kinds of company, each doing a specific job for us:

The chat window is not loaded on the tool pages. Those are the pages that open your order PDFs and product photos, and no outside company's code runs on them - the browser is instructed to refuse it, not merely asked. If you are in the middle of cropping labels and want to ask us something, the chat is on any public page of this site, and [email protected] always works.

We may also disclose information where the law requires it.

The Chrome extension

Our browser extension, EcomTools listing details, is a separate thing from this website and collects nothing at all. It has no account, talks to no server of ours, and contains no analytics.

It reads the amazon.in page you are looking at in order to draw its panel on that page, and on a search page it loads each result's own product page so it can show the rank and seller count. That reading happens entirely inside your browser and none of it is sent to us.

The list of listings you save, and your sales-estimate settings, are stored by your own browser on your own computer. We never receive them. The extension's popup has a Clear the list button that deletes them, and removing the extension removes them with it.

How long we keep it

Account and payment records are kept while your account exists and for as long afterwards as tax and accounting rules require. Verification codes are deleted within days. Sessions expire, and are removed after they do.

Messages sent through the contact form are kept for 24 months and then deleted, whether or not you still have an account. Deleting your account does not delete a message you have sent us - a bug is still a bug after the person who reported it has gone - but the message stops being linked to you.

Your choices

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete your account. Write to [email protected] from the email on your account, or message the mobile number registered to it. We may need to verify it is you before acting.

Deleting your account ends any remaining plan and is not reversible.

Cookies

We set one cookie, and only after you sign in: it holds your session token so you stay signed in. It is marked HttpOnly, so scripts cannot read it. We do not use advertising or tracking cookies.

The chat window on our public pages sets its own cookies, in your browser, so that a conversation you start is still yours when you come back to it. Those are Tawk.to's and are governed by their policy. They are not set on the tool pages, because the chat is not loaded there.

Children

This is a tool for registered sellers and is not directed at anyone under 18.

Changes

If this policy changes we will update the date at the top, and tell you where the change is significant.

Questions about this page? Message us on WhatsApp or email [email protected].