Privacy Policy

This policy explains what information Bizio Invoicing handles when you use our website at bizioinvoicing.pk and the invoicing application behind it, why we handle it, and what you can ask us to do about it. It is written to be read, not to be got past.

1. Who we are

Bizio Invoicing is a software service operated as a sole proprietorship based in Pakistan. In this policy, “we”, “us” and “Bizio Invoicing” mean that business, and “you” means the person or business using the service.

We decide how and why the information described below is handled, and we are the people to contact about it. Our details are in section 13.

2. What we collect

We collect what the service needs in order to work. In practice that falls into six groups.

Account information

Because accounts are created by us rather than through a sign-up form, this is what you give us when you ask for one: the name of your business, the registration number it is registered under (NTN or CNIC), a contact email address and phone number, and the name of the person the account is for. We also record which areas of the application each account is allowed to use.

Business and seller details

Your business name, registration number, province, address and whether you are a retailer. These are the seller details that appear on every invoice submitted to FBR, which is why the service holds them.

FBR credentials

The FBR digital invoicing token or tokens you add for the sandbox and production environments. They are stored on our server, are never sent to your browser, and are used only to submit invoices you ask us to submit.

Invoice and business records

The content of the invoices you prepare and file — invoice numbers and dates, document and sale types, line items with their descriptions, HS codes, quantities, units, prices, rates and tax amounts — together with the response FBR returns for each submission. It also includes the customers and products you save for reuse, and any Excel files you upload for batch filing.

Billing records

Your plan, its price and billing period, the invoice allowance it carries, and the payments recorded against it — amount, date, method and any reference you give us. Payments are arranged directly with us; we do not collect or store card details on this website.

Technical and support information

Ordinary server and application logs — the time of a request, the network address it came from, the browser reporting it, and what failed when something failed. We use these to keep the service running and secure. We also keep the messages you send us on WhatsApp or by email, so support conversations have a history.

3. How we use it

• To run the service — to let you sign in, prepare invoices, validate them, submit them to FBR under your own credentials, and show you what happened.
• To keep your records — so a submission and FBR's response to it can be found again later.
• To support you — to answer questions and investigate problems you report.
• To bill you — to apply your plan, track the invoice allowance it includes, and record payments.
• To keep the service secure — to detect and investigate abuse, unauthorised access and technical faults.
• To meet legal obligations — where a law or a lawful order requires us to retain or produce something.

We do not sell your information, we do not share it with advertisers or data brokers, and we do not use your invoice data to build anything unrelated to running this service for you.

4. Data about your customers

Invoices necessarily contain details about your buyers — names, registration numbers, provinces and addresses. We process that information on your instructions, in order to file the invoices you tell us to file, and for no other purpose.

You are responsible for having the right to give us those details in the first place, and for making sure they are accurate. If a buyer asks you to correct or remove something, you can do that in the application, or ask us and we will help.

5. Who we share it with

We share information only where the service requires it:

• The Federal Board of Revenue. Invoice details you submit are sent to FBR's digital invoicing system. That is the purpose of the product, and FBR handles that data under its own rules.
• Google. Sign-in runs on Firebase Authentication, so Google processes your account identifier and password verification on our behalf. We never see or store your password.
• Our infrastructure providers. The companies that host our servers and databases, strictly to the extent needed to host them.
• Professional advisers. Accountants or lawyers where they need it to advise us, under a duty of confidentiality.
• Authorities. Where we are required to disclose something by law or by a lawful order.
• A successor. If the business is ever transferred, your information may transfer with it, subject to this policy.

6. Cookies and browser storage

When enabled on our production website, Google Analytics 4 uses analytics cookies to help us understand visits to public pages, visitor engagement and interest in pricing and contact options. Google processes information such as browser and device details, approximate location, referring website and a cookie identifier. We disable advertising personalization and Google signals in our analytics configuration.

We measure public page visits and clicks on our WhatsApp, phone, email and plan-request options. Opening WhatsApp does not tell us whether a message was sent. We do not send account-request form contents, invoice or customer records, registration numbers, authentication identifiers or FBR credentials to Google Analytics. Our analytics excludes private application pages and removes query strings and fragments from the page URLs it sends.

Google provides this analytics service and may process analytics information outside Pakistan. You can block analytics cookies through your browser settings or use Google's Analytics opt-out browser add-on. See how Google uses information from sites using its services for more details.

When you sign in, the authentication service stores a session token in your browser so that you stay signed in between pages. That storage is necessary for the application to work — clearing it simply signs you out.

7. Where data is held

Our hosting and authentication providers operate internationally, so information may be stored or processed on servers outside Pakistan. Where that happens, it remains subject to this policy and to the contracts we have with those providers. Invoice submissions themselves go to FBR's own systems in Pakistan.

8. How long we keep it

We keep your account and business details for as long as your account is open. Invoice records and their FBR responses are kept for as long as your account is open and for as long as afterwards as is reasonable given that they are tax records — they are the proof of what was filed, and deleting them early would work against you.

Logs are kept for a limited period for security and diagnostics. Billing records are kept for as long as required for accounting purposes. If you close your account and ask us to delete your data, we will do so except where we are required or reasonably need to retain it.

9. How we protect it

• Traffic between your browser and our servers is encrypted.
• FBR tokens are held server-side and are never included in anything sent to the browser.
• Passwords are handled by Firebase Authentication and are never stored by us.
• Your invoices, customers and products are scoped to your business, and access to our systems is limited to the people who need it to run the service.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your data, we will tell you what happened and what we are doing about it.

One thing we ask of you: no one from Bizio Invoicing will ever ask for your password, and you should not send your FBR token or your password over WhatsApp or email.

10. Your choices and rights

You can ask us to:

• tell you what information we hold about you;
• correct anything that is wrong;
• give you a copy of your invoice records in a usable format;
• delete your account and the data we are not required to keep;
• stop using your details to contact you about the service.

Write to us at bizio.official1@gmail.com from the address on your account, or message us on WhatsApp at +92 339 4453223. We may need to check who you are before acting on a request, and we will respond as quickly as we reasonably can.

11. Children

The service is for registered businesses and the people who run them. It is not directed at children, and we do not knowingly create accounts for anyone under 18.

12. Changes to this policy

We may update this policy as the service changes. The date at the top shows when it was last revised. If a change materially affects how we handle your information, we will tell account holders directly rather than relying on you to notice.

13. Contact us

Questions about this policy, or about anything we hold, go to bizio.official1@gmail.com or WhatsApp +92 339 4453223. The terms you use the service under are set out in our terms of service.