A plain list of the data FrogBill handles, where it lives, and who it’s shared with. It supports our privacy policy.
What we store
| Data | Why | Stored | Kept for |
|---|---|---|---|
| Your name, email, password hash, preferences | Your account | India (DigitalOcean) | Until account closure + 90 days |
| Business profile, logo, signature, bank and UPI details, tax numbers | Printed on your documents | India (DigitalOcean) | Until account closure + 90 days |
| Your customers and products | Filling in your documents | India (DigitalOcean) | Until you delete them or close your account + 90 days |
| Quotations, invoices, payments you record | Your records | India (DigitalOcean) | Until account closure + 90 days |
| Team members and invitations | Access to your business | India (DigitalOcean) | Invitations expire after 7 days |
| Plan, status, Razorpay payment references | Your subscription | India (DigitalOcean); payment data with Razorpay | As tax law requires (about 8 years) |
| WhatsApp messages sent for a business (customer’s mobile number, which message, delivery status) | Reminders and updates the business switched on; showing the business what was delivered | India (DigitalOcean); delivered through Meta | Until account closure + 90 days |
| WhatsApp opt-outs (mobile numbers that replied STOP) | Never messaging them again | India (DigitalOcean) | Until the number replies START |
| Error reports (what went wrong in the app, the page and browser; no IP address, cookies or form contents) | Fixing problems | Germany (Sentry) | Up to 90 days |
| Contact form messages (name, email, optional phone, topic, message) | Answering you | Our mailbox | Up to 2 years after we last hear from you |
| Contact form spam check (scrambled IP address and send times) | Stopping spam | India (DigitalOcean) | 1 hour |
| Server logs (IP address, browser, times) | Security and fixing problems | India (DigitalOcean) | 14 days |
| Cached PDF files | Faster downloads | India (DigitalOcean) | 30 days |
| Backups of all of the above | Recovery | India (DigitalOcean) | Rolling, overwritten within 30 days |
What we don’t do
- No advertising, analytics or tracking tools, and no data sold or shared for marketing.
- No card, UPI PIN or bank login details — those stay with Razorpay and your bank.
- Fonts and all files are served from our own servers, so visiting FrogBill doesn’t tell other companies about you.
Cookies and browser storage
| Name | Type | Purpose | Lasts |
|---|---|---|---|
| Session cookie | Essential | Keeps you signed in to the app | Until you sign out, or up to 4 hours of inactivity (longer if you choose “Keep me signed in”) |
| XSRF-TOKEN | Essential | Protects your forms from cross-site request forgery | Same as the session |
| Theme and similar settings | Browser storage | Remembers your light or dark theme and similar display choices | Until you clear your browser data |
These are strictly necessary for FrogBill to work, so they don’t need consent. This website itself sets no cookies.
Questions
Grievance Officer: SHARON V, support@frogbill.com.