Privacy Policy

For Easy Hishabbook, accounting and billing software published by Software 4 All. Last updated: 24 September 2026.

This Privacy Policy explains what information Easy Hishabbook (the “Software”, the “App”) collects, why it collects it, who it is shared with, how long it is kept and how you can have it deleted. It also sets out exactly how the App handles data it accesses from your Google Account through Google Drive, including the product and catalog images you store there.

Easy Hishabbook is developed and operated by Software 4 All (“we”, “us”, “our”). This policy is separate from our Terms and Conditions, which govern your use of the Software.

1. Google user data

This section describes how the App accesses, uses, stores and shares data from your Google Account. It is the part of this policy that governs our use of Google APIs.

1.1 What we access, and why

Easy Hishabbook stores your accounting data and your product images in your own Google Drive, not on our servers. This is a deliberate design choice: your books stay in an account you control, and you can remove them at any time. To do that, the App asks for the following Google OAuth scopes when you connect your Google Account:

Scope Why the App needs it

Scope	Why the App needs it
`https://www.googleapis.com/auth/drive.file`	Gives the App access only to files and folders the App itself creates. The App uses it to: create the images folder described in section 1.3, upload the product and catalog images you add to it, list them in the App's image picker, and delete the ones you remove; set link sharing on that folder and its images (section 1.3); delete a company's database file when you delete the company in the App; show, on the App's About page, which Google Account is connected: its display name, e-mail address, profile photo and storage used. Google returns this to any app with Drive access.
`https://www.googleapis.com/auth/drive.appdata`	To keep each company's database file in the hidden application-data folder that Google provides for this App. That folder does not appear in your normal Drive view, cannot be opened by other apps, and is used to sync your books between devices.

https://www.googleapis.com/auth/drive.file

Gives the App access only to files and folders the App itself creates. The App uses it to:

create the images folder described in section 1.3, upload the product and catalog images you add to it, list them in the App's image picker, and delete the ones you remove;
set link sharing on that folder and its images (section 1.3);
delete a company's database file when you delete the company in the App;
show, on the App's About page, which Google Account is connected: its display name, e-mail address, profile photo and storage used. Google returns this to any app with Drive access.

https://www.googleapis.com/auth/drive.appdata To keep each company's database file in the hidden application-data folder that Google provides for this App. That folder does not appear in your normal Drive view, cannot be opened by other apps, and is used to sync your books between devices.

1.2 What we do not access

We cannot see the rest of your Drive. Under the drive.file scope Google lets the App see only the files and folders it created. It cannot list, open, read, index or analyse any other file in your Google Drive.
We do not request access to Gmail, Contacts, Calendar or any other Google service. The App requests only the two Drive scopes above.
Your Google name, e-mail address and photo stay in your browser. The About page fetches them directly from Google to show you which account is linked. They are not sent to our servers and we do not store them.
We do not use your Google Drive content for advertising or profiling of any kind.

1.3 Product and catalog images: stored in your Drive and link-shared

Please read this before adding images. Images you add through the App can be viewed by anyone who has their link. Do not upload identity documents, signatures, bank or card details, or any other confidential or personal picture. Use the images folder only for product photos, logos and similar material you are happy for customers to see.

Where they are stored. The first time you use images, the App creates a folder named <your Easy Hishabbook username>_EasyHishabbook_Images in your Google Drive. Images you upload through the App's image picker are saved in that folder. The picker only ever shows this one folder. To use an image kept elsewhere in your Drive or on your computer, upload it through the picker.
Why they are link-shared. The App sets the images folder, and each image it uploads, to "Anyone with the link: Viewer". This lets your images appear in invoice previews and PDFs, the product catalog, and the WhatsApp messages and e-mails you send. It also lets them display for recipients and staff who are not signed in to your Google Account.
What that means. Anyone who has the link to an image or to the folder can view and download it without signing in. We do not publish these links or submit them to search engines. However, a link contained in a document or message you send can be forwarded by the people who receive it.
Only images are shared. Your company database files and backups are kept in the hidden application-data folder and are never link-shared.
How images are displayed. The App loads image thumbnails directly from Google's own servers (lh3.googleusercontent.com and drive.google.com) into your browser. Images are not copied to our servers.
Your control. You can rename or delete any image, or the whole folder, in Google Drive at any time. Deleting an image in the App's picker deletes it from your Drive. You can also turn off link sharing in Google Drive. If you do, those images will no longer appear in the App, on your documents or in messages.

1.4 Access tokens

When you connect your Google Account, Google issues an access token and a refresh token. We store these on our server, linked to your Easy Hishabbook account, so the App can keep your books in sync without asking you to sign in to Google every time. Because they are held on the server, staff you give an Easy Hishabbook login to can work with your company files and images without having access to your Google Account itself. The tokens are used for no purpose other than reading and writing the App's own files in your Drive.

You can withdraw this access at any time. Use Delink on the App's About page, which deletes the stored tokens from our server, or remove Easy Hishabbook from your Google Account permissions page. Either way the App immediately loses access to your Drive and can no longer sync. Nothing is deleted from your Drive: your company files and images remain there, and they are yours.

1.5 Limited Use

Google API Services User Data Policy

Easy Hishabbook's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, and without limiting the above, we affirm that we do not:

use Google user data for serving advertising of any kind, including targeted, personalised, retargeted or interest-based advertising;
sell, rent or transfer Google user data to data brokers, information resellers or any other third party for such purposes;
use Google user data to determine credit-worthiness or for lending purposes;
use Google user data to develop, improve or train generalised or non-personalised artificial intelligence or machine learning models. Google Workspace APIs are not used to develop, improve or train non-personalised AI and/or ML models;
use Google user data to build or augment any database or profile for resale or independent use.

Human access. No employee of Software 4 All reads the contents of your Google Drive files. The only exceptions permitted under the Limited Use requirements, and the only ones we rely on, are: where we have your explicit consent (for example, you send us a file while asking for support); where it is necessary for security purposes, such as investigating abuse; where we are required to do so by law; and where the data has been aggregated and de-identified.

2. Information we collect

2.1 Information you give us when you register

To create an Easy Hishabbook account you provide, and we store on our server:

Data	Why
Username	Identifies your account and is how you sign in.
Email address	Sign-in, account recovery, licence delivery and service notices.
Mobile number	Sign-in and account-related contact.
Password	Stored only as a one-way bcrypt hash. We never store, and cannot retrieve, your password in readable form.
City and state	Regional configuration, including the GST state code used on your documents.
Dealer code	Associates your account with the dealer or reseller who supports you.

2.2 Account and subscription records

We keep your registration date, last sign-in time, account status, subscription expiry date and any extra validity granted to you, together with a session token issued when you sign in. These are used to run your account, to tell you when your subscription is ending, and to secure your session.

2.3 Your business and accounting data

The invoices, parties, products, stock, ledgers, vouchers and company details you enter are your business records. They are held in database files in your own Google Drive as described in section 1, and cached in your browser on the device you are using so the App can work quickly. Product and catalog images you add are stored in your Google Drive as described in section 1.3. We do not keep a copy of your accounting data on our servers.

2.4 Settings you choose to provide

If you use the optional integrations, the App stores the configuration you enter for them — for example your e-mail sending settings, WhatsApp message templates, or the credentials required by the GST Suvidha Provider for e-invoice and e-way bill filing. These are stored so the feature can work on your behalf and are used for nothing else.

2.5 Local storage on your device

The App stores preferences and a working copy of your open company database in your browser's local storage on your own device. Clearing your browser data removes it. This information is not transmitted to us.

3. How we use information

To provide the Software and keep your books synchronised with your Google Drive.
To authenticate you and keep your account secure.
To provide customer support, when you ask for it.
To manage licensing, subscription validity and renewals.
To send you service notices inside the App — for example maintenance windows or a subscription about to expire.
To carry out actions you explicitly ask for, such as sending an invoice by e-mail or WhatsApp, or filing a return with the GST system.
To meet our legal and tax obligations.

We do not sell your personal information. We do not use it for advertising, and we do not share it with advertisers.

4. Who we share information with

We share information only with the parties below, and only to the extent needed to deliver the service you asked for:

Recipient	What, and why
Google	Your accounting files and product images are stored in your own Google Drive. Handled under Google's own privacy policy.
Anyone with an image link	Product and catalog images in your images folder can be viewed by anyone who has their link, as explained in section 1.3. This applies to images only, never to your company files.
Our hosting provider	Operates the servers and database holding your account record. They process it on our instructions only.
Your dealer	The dealer whose code is on your account can see your account details in order to support and renew you. They cannot see your accounting data.
Messaging and e-mail providers	Only when you send a document by WhatsApp or e-mail, and only the document and recipient you chose.
GST Suvidha Provider / NIC	Only when you choose to generate an e-invoice or e-way bill, and only the invoice data that filing requires.
Authorities	Where we are required to disclose by law, or to establish or defend a legal claim.

5. How we protect information

All traffic between the App and our servers is encrypted in transit using HTTPS/TLS.
Passwords are stored only as one-way bcrypt hashes and are never held in readable form.
Google access and refresh tokens are held on our server and used solely to reach the App's own files in your Drive.
The App's drive.file access means it cannot see any file in your Drive that it did not create.
Company database files are kept in Google's hidden application-data folder and are never link-shared.
Access to the production database is limited to authorised administrators of Software 4 All.
Your accounting data is protected additionally by the security of your own Google Account — we recommend enabling two-step verification on it.

No method of transmission or storage is completely secure. While we take the measures above, we cannot guarantee absolute security, and you are responsible for keeping your own credentials confidential.

6. Data retention and deletion

6.1 How long we keep things

Account record — kept for as long as your account exists, and deleted when you ask us to close it.
Google access and refresh tokens — kept while your Google Account is connected. They are removed when you disconnect, revoke access from your Google Account, or close your account.
Accounting data — kept in your Google Drive for as long as you keep it there. It is under your control, not ours.
Product and catalog images — kept in your images folder in Google Drive until you delete them, and link-shared for as long as they are there.
Records we must keep by law — such as invoices for payments you made to us, retained for the period the law requires.

6.2 How to delete your data

Delete a company. Deleting a company inside the App removes that company's database from your Google Drive together with the records in it.
Disconnect Google. Use Delink on the App's About page, or revoke Easy Hishabbook at myaccount.google.com/permissions. We lose all access to your Drive immediately. Nothing in your Drive is deleted.
Delete images. Remove an image in the App's image picker, or delete images or the whole …_EasyHishabbook_Images folder yourself in Google Drive.
Delete the hidden company files. In Google Drive, open Settings → Manage apps → Easy Hishabbook → Options → Delete hidden app data. This removes every company database the App has stored in your Drive.
Close your account. Write to sales@software4all.co.in from your registered e-mail address and ask us to delete your account. We will delete your account record and your stored Google tokens within 30 days, except anything we are required to keep by law, and confirm to you when it is done.

7. Your rights

You may ask us to give you a copy of the personal information we hold about you, correct it if it is wrong, delete it, or withdraw a consent you previously gave. Write to sales@software4all.co.in and we will respond within 30 days. Because your accounting data lives in your own Google Drive, you can already access, export and delete it yourself at any time.

8. Children

Easy Hishabbook is business software and is not directed at children. If you are under 18, you may register only with the consent and under the credentials of a parent or legal guardian. We do not knowingly collect personal information from children.

9. Changes to this policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with a new “Last updated” date. Where a change materially affects how we handle your data, we will also notify you inside the App. Continuing to use the Software after a change means you accept the updated policy.

10. Contact us

If you have any question about this Privacy Policy, about what we hold, or about the Google Drive permissions the App requests, please contact us:

Software 4 All
Publisher of Easy Hishabbook
Email: sales@software4all.co.in
Phone: 02822 350 200