Privacy Policy
Last updated: 24 October 2026
About this policy
EAMBAS ("the app") is provided by Weftkart, the owner of the EAMBAS brand ("we", "us"). This policy explains what information the app collects, why, how it is protected, and the choices you have.
By creating an account or using the app, you agree to this policy. If you do not agree, please do not use the app.
In short: your accounting records (sales, purchases, parties, stock, payments) are stored only on your phone. Only your account, business profile and subscription details are sent to our server.
Information sent to our server
- Account: Username, email address and password, used to create your account and sign you in. Passwords are stored by the server in hashed (unreadable) form.
- Business profile: Business name, owner name, GSTIN, address, business type, currency, GST registration status and financial year dates, sent when you create a company.
- Subscription: Your plan, subscription dates and payment status. For offline payments, the payment details and the proof image you choose to upload.
- Sign-in records: Date, time, IP address and device/app type of each sign-in and failed sign-in attempt, used to protect your account (for example, to block repeated wrong passwords).
- App version: When the app opens it sends its version number, only to check whether an update is available.
Information stored only on your phone
The following stays in the app's private storage on your device and is not uploaded to our server:
- Sales, purchases, returns, receipts, payments, expenses, cash and bank entries, stock and invoices.
- Customer and vendor details you enter (names, phone numbers, addresses, GSTINs, opening balances).
- Your bank account details, business logo, item photos, invoice settings and app lock PIN.
- Backup, PDF and Excel files you create. They are saved where you choose and leave your phone only when you share them yourself.
- Google Drive backup (optional): if you connect your Google account, backups go straight from your phone to your own Google Drive (folder “EAMBAS Backups”). They never pass through or get stored on our server, and we cannot open them. The app asks only for the
drive.filepermission, so it can see only the files it created — nothing else in your Drive. You can disconnect any time from Backup & Restore.
What we do not collect
- No location, contacts, SMS or call logs.
- No advertising ID. The app shows no ads and contains no analytics or tracking tools.
- We never sell or rent your information.
How we use your information
- To create and secure your account and sign you in.
- To manage your subscription and verify payments.
- To keep accounts secure and prevent misuse or fraud.
- To tell you when an app update is available.
- To reply when you contact us for support.
- To meet legal obligations, such as tax or law-enforcement requests made under applicable law.
Sharing with others
- Payments: Plan payments in the app are processed by Google Play or our payment partner Razorpay. Your card, UPI and bank details go directly to them and are never seen or stored by the app or by us. Their own privacy policies apply to that payment.
- Google Drive: only if you turn on Google Drive backup, the app uploads your backup file to your own Google account. Google’s privacy policy applies to files in your Drive.
- E-Way Bill & GSTIN: Only when you generate an E-Way Bill automatically or search a GSTIN online, the invoice/transport details or the GSTIN are sent through our server to our GST Suvidha Provider (GSP) and the government’s e-Way Bill / GST system. Your e-Way Bill API password is not stored.
- Hosting: Our server is run by a hosting provider that stores the account data on our behalf.
- Legal: We disclose information only when required by law or to protect our legal rights.
Permissions the app asks for
- Internet: To sign in and manage your subscription.
- Folder access (optional): Only the folder you choose with Android’s folder picker (Default Download Location, Auto Backup), and only to save, list and remove the files you export or back up. The app cannot see any other files on your phone.
- Photos / camera (optional): Only when you pick a business logo, item photo or payment proof. Nothing is taken without your action.
Security
Data sent between the app and our server is encrypted in transit (HTTPS). You can protect the app with a PIN from Settings > Security.
No method of storage or transfer is 100% secure. Keep your phone locked and your password private.
In short: your accounting records (sales, purchases, parties, stock, payments) are stored only on your phone. Only your account, business profile and subscription details are sent to our server.
Keeping and deleting data
- Account, business profile, subscription and sign-in records are kept while your account is active, and longer only where the law requires (for example, payment records).
- Delete your account at any time from Profile > Delete Account in the app. This deletes your account and its server data, and every company and entry on that phone. You can also request deletion on our Delete Account page or by email.
- Payment and tax invoice records, if any, are kept for as long as tax law requires, without your name, email or phone.
- Data on your phone is also deleted when you delete a company, clear the app's data or uninstall the app.
Your rights
Under India's Digital Personal Data Protection Act, 2023 and other applicable law, you can:
- Ask what personal data we hold about you.
- Ask us to correct or update it.
- Ask us to delete it and close your account.
- Withdraw your consent by stopping use and deleting your account.
- Raise a grievance with our Grievance Officer.
Your responsibilities
- You are responsible for the accuracy of the entries you make and for checking invoices, GST figures and reports before using them for tax filing or any other official purpose.
- The app is a record-keeping tool. It does not give tax, legal or financial advice. Consult a qualified professional when needed.
- You decide what customer and vendor information you store, and must have the right to store and use it.
- To the extent allowed by law, we are not liable for losses caused by incorrect entries, missing backups, or a lost or damaged device.
Children
The app is meant for businesses and is not directed at anyone under 18. We do not knowingly collect data from children.
Changes to this policy
We may update this policy when the app changes. The date at the top shows the latest version. Continuing to use the app after an update means you accept the updated policy.
Contact & Grievance Officer
For privacy questions, data deletion requests or complaints, contact us at [email protected].
- Grievance Officer: Pawan, Weftkart (owner of the EAMBAS brand)
- Email: [email protected]
- Address: Panagarh Bazar, West Bengal 713148, India
We aim to respond within 30 days, as required by law.