The extension reads invoice/bill data from a Word or Excel file you choose on your own computer, and sends that file to our server to be processed into structured data. We do not extract or transmit patient name or doctor name fields, even when present in the source file — our processing does not read those fields at all. Processed results are sent back to your browser and stored locally to fill form fields on the SIMS portal — the only external site the extension interacts with for this purpose. Uploaded invoice files are processed in memory on our server and are not permanently stored or retained after processing completes, and are not shared with any third party.

Pharmacy name and business address, proprietor name, RGHS empanelment code, drug license number, email address and phone number, and your license key, device IP address, and a device fingerprint. No characteristic in this fingerprint personally identifies you on its own; it is used only to distinguish one licensed device from another.

We collect this data to verify your pharmacy identity and RGHS empanelment (KYC), generate and activate your license key and enforce its device limit, provide customer support and send license/renewal notifications, process payments for your subscription, and detect and investigate suspected fraud or unauthorized use.

Your data is stored using Firebase and Google Cloud infrastructure, with encryption in transit. We use reasonable technical and organizational measures to protect data we hold, including encrypted signing credentials and access controls on our infrastructure. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal data, we will notify affected customers without undue delay, as required by applicable law.

We share limited data with the following third parties strictly to operate the service, each governed by its own privacy policy: Razorpay, Firebase / Google Cloud, and api.ipify.org. We do not sell your data to advertisers or unrelated third parties.

Under the DPDP Act, 2023, you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data (subject to legal retention requirements), and withdraw consent for data processing at any time. To exercise these rights, contact us using the details below. We may require identity verification before acting on a request, and may retain data where required for legal, security, or fraud-prevention purposes.

We retain your data for as long as your account is active or as needed to comply with legal, accounting, and fraud-prevention obligations. You may request deletion of your data after account closure, subject to applicable law.

The Software is intended for business use by pharmacies and their staff and is not directed at individuals under the age of 18.

We may update this Privacy Policy from time to time. Continued use of the Software after changes take effect constitutes acceptance of the revised policy.

For any privacy-related queries or to exercise your data rights: autobilluploader@gmail.com