Legal
Privacy Policy
What Bottle Flow collects, why, who else processes it, and what you can ask us to do with it.
What we collect
- Account data. Your phone number, used for one-time-code sign-in, and the name you provide.
- Business records you enter. Organisation details (name, address, GSTIN if provided), products, materials, customers, vendors, purchases, sales, production entries and payments. This is your business’s operational data; you control what you enter.
- Subscription and billing data. Your plan, subscription status and payment records for your Bottle Flow subscription. Card and bank details are handled by our payment processor and never reach our servers.
- Support data. Tickets and messages you send to support.
- Technical data. Crash reports containing device and operating-system information and error context, when crash reporting is enabled. It is configured to exclude authentication tokens, one-time codes and secrets.
What we do not collect
No location, contacts, microphone, camera or advertising identifiers. The app requests no such permissions.
How data is used
To provide the service (multi-tenant business records scoped to your organisation), to process subscription billing, to respond to support requests and to fix defects using crash reports. We do not sell personal data and we do not use your business records for advertising.
Access within your organisation
Data you enter is visible to your organisation’s members according to their role: Owner, Manager or Gate. Bottle Flow staff access account and billing information for support and operations through an audited internal system; staff tooling does not browse your individual sales or purchase line items.
Retention and deletion
Business and financial records are retained while your organisation is active, and thereafter in line with statutory retention obligations. You may request account deletion in the app under More → Help; requests are processed by our team as described at To be completed: deletion-information URL. A subscription lapse never deletes your data.
Security
Transport encryption, row-level security isolating every organisation’s data, audited administrative access, and least-privilege server credentials.
Your rights
Contact us via support@bottleflow.in to access, correct or delete your personal data, subject to retention obligations. To be completed: India DPDP Act and GDPR specifics, per legal review
Operator and contact
Operator: To be completed: registered legal entity and address · Last updated: To be completed: publication date · Contact: support@bottleflow.in