E-Way EasyThis Privacy Policy explains how E-Way Easy ("we", "us"), the provider of the E-Way Easy mobile app and website (the "Service"), collects, uses, shares and protects your personal data. It is published under the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules") and the Digital Personal Data Protection Act, 2023 ("DPDP Act"). For the DPDP Act, we are the Data Fiduciary for the personal data described here.
By creating an account and ticking the consent box, you agree to this Policy. If you do not agree, please do not use the Service.
1. Personal data we collect
You give us
- Account: your email address and password (stored by Google Firebase Authentication, never by us in readable form), or your Google account name, email and profile picture if you sign in with Google.
- Business profile: business name, GSTIN(s), address, state, PIN code, phone number, email, and bank account details you choose to print on invoices.
- Invoices and records: invoices, buyers (names, GSTINs, addresses), products, transporters, vehicle numbers and e-way bill details you create or import.
- E-way bill portal login: the API username and password you create on the NIC e-way bill portal, used only to file e-way bills you ask for. The password is stored encrypted and is never shown again.
- PDF invoices you upload: read in memory on our server to suggest invoice details, then discarded. We do not store the file.
- Support messages you send us.
Collected when you use the Service
- Payments: amount, credits bought, and the Razorpay order/payment ID and status. Card, UPI, net-banking and wallet details are collected by Razorpay; we never receive your card number, CVV or UPI PIN.
- Wallet activity: credits added and used for each e-way bill action.
- Technical data: IP address, device and app version, request logs and error reports, used for security and to keep the Service working.
- Consent record: the version of these documents you accepted, when, your IP address and device type, as proof of consent under the DPDP Act.
Under the SPDI Rules, passwords and financial information such as bank account details are "sensitive personal data". We collect them only for the purposes below and with your consent.
2. How we use your data
- To create and secure your account, and send sign-up codes and service emails.
- To create, print and share invoices, and to generate, update, consolidate, extend or cancel e-way bills on the NIC e-way bill system at your request.
- To verify GSTINs and fill in buyer details, and to look up road distance between PIN codes.
- To process credit purchases, keep your wallet balance and prevent duplicate charges.
- To provide support, prevent fraud and misuse, and keep the Service secure.
- To comply with law, including GST and income-tax law, and lawful requests from government authorities.
We do not sell your personal data, and we do not use your invoice or buyer data for advertising.
4. Where we store it and for how long
Your data is stored on Google Cloud servers. Our server runs in the Mumbai (asia-south1) region.
We keep your data while your account is active. When you ask us to delete your account, we delete or anonymise your personal data within 30 days, except records we must keep by law (for example, payment and tax records) or to resolve disputes, which we keep only as long as required.
You are responsible for keeping your own copies of invoices and e-way bills for the period required by GST law. Use Account → Export my data before deleting your account.
5. How we protect it
- All traffic between the app and our server is encrypted (HTTPS).
- Your e-way bill portal password is encrypted before it is stored.
- Each account can access only its own data; staff access is limited and logged.
- We follow reasonable security practices under the SPDI Rules.
No system is completely secure. If a personal data breach affects you, we will inform you and the Data Protection Board of India as the DPDP Act requires.
6. Your rights
Under the DPDP Act you have the right to:
- Access a summary of the personal data we process and who we shared it with.
- Correct and update your data. You can edit most details in the app.
- Erase your data, by asking us to delete your account (Account → Request account deletion).
- Withdraw consent at any time. Withdrawing consent does not affect processing done before it, and we will no longer be able to provide the Service.
- Nominate a person to exercise your rights in case of your death or incapacity.
- Raise a grievance with us (see section 8), and if you are not satisfied, complain to the Data Protection Board of India.
To use these rights, email bvbtrade9@gmail.com. We may need to confirm your identity first.
7. Children
The Service is meant for businesses and is not for anyone under 18. We do not knowingly collect personal data of children. If you believe a child has given us data, contact us and we will delete it.
8. Grievances and contact
For questions, requests about your data, or grievances under Rule 5(9) of the SPDI Rules and the DPDP Act, contact us at:
| bvbtrade9@gmail.com | |
| Address | E-Way Easy, Rajkot, Gujarat, India |
We acknowledge grievances within 48 hours and resolve them within 30 days.
9. Changes to this Policy
We may update this Policy. If a change affects how we use your data, the app will ask you to read and accept the new version before you continue. The version and effective date are shown at the top.
See also our Terms & Conditions.