BillDot POS is operated by The Super Helt. In this Privacy Policy, “BillDot,” “we,” “us,” and “our” refer to The Super Helt and its BillDot POS services. “You” refers to business owners, administrators, staff members, customers and other people who use or interact with the services.
1. Scope of this policy
This Privacy Policy applies to:
- the website available at https://bill.thesuperhelt.com;
- the BillDot POS web-based point-of-sale and business management system;
- associated mobile apps, PWA installations and QR-ordering interfaces;
- business dashboards, customer ordering screens, invoices, reports and support services;
- integrations or optional features enabled by a merchant.
A restaurant, café, shop or other merchant using BillDot POS may separately control customer information entered into its account. In those cases, the merchant may act as the primary data controller or data fiduciary, and we process the information to provide the service.
2. Information we collect
| Category | Examples | Why it may be collected |
|---|---|---|
| Account and identity data | Name, business name, phone number, email address, username, role and login details. | To create and secure accounts, authenticate users and provide support. |
| Business information | Business address, GST or tax details, invoice settings, logo, branches, staff and operating preferences. | To configure POS functions, bills, reports and business settings. |
| Transaction and order data | Products, quantities, prices, discounts, taxes, table number, order status, payment method, KOT and invoice details. | To process orders, maintain sales records and produce invoices and analytics. |
| Customer information | Customer name, phone number, delivery or billing details and order history when entered by the customer or merchant. | To fulfil orders, issue bills, provide support and enable merchant customer-management features. |
| Inventory and supplier data | Product stock, purchase records, supplier names, supplier contact details and inventory movements. | To provide inventory, purchase and supplier-management tools. |
| Technical and usage data | IP address, browser, device type, operating system, timestamps, pages or features used, session data and error logs. | To operate, secure, diagnose and improve the service. |
| Support communications | Messages, screenshots, issue details and other information sent to support. | To respond to requests and troubleshoot problems. |
| Uploaded content | Business logos, QR images, product photographs, menu content or files uploaded by authorised users. | To display and use the content within requested features. |
3. How we use information
We may use information to:
- provide, maintain and improve the POS, QR-ordering, billing, inventory, reporting and customer-management services;
- create and administer user accounts and access permissions;
- process and record orders, invoices, refunds, payments and business activities;
- send service-related messages such as account alerts, support replies or important operational notices;
- prevent fraud, misuse, unauthorised access and other security threats;
- diagnose errors, maintain backups and monitor system reliability;
- comply with tax, accounting, regulatory, legal and dispute-resolution requirements;
- enforce our agreements and protect the rights and safety of users, customers and the service.
Where applicable, we process personal data based on consent, performance of a contract, compliance with legal obligations, or other lawful and legitimate uses permitted by applicable law.
4. Mobile app and device permissions
Camera
A BillDot-related app may request camera access to scan table QR codes or product barcodes. Camera access is used only when you activate a scanning feature. We do not continuously record video.
Photos or files
Authorised users may choose files or images to upload business logos, products, menus, payment QR codes or other content. We access only the content selected or permitted by the user.
Notifications
Where enabled, notifications may be used for new orders, status updates, support messages or other important service alerts. Notification permission can be changed in device settings.
Location
BillDot POS does not require precise device location for its core POS and QR-ordering functions. If a future optional location-based feature is offered, we will request permission and provide an appropriate disclosure before collecting location data.
5. When we share information
We may share limited information in the following situations:
- With the merchant: customer order and contact information may be visible to the restaurant, café, shop or business from which the customer is ordering.
- With service providers: hosting, database, security, backup, email, SMS, messaging, payment, analytics or technical-support providers may process data only as needed to perform services for us or the merchant.
- With integrations selected by a merchant: information may be sent to third-party services when an authorised user enables or uses an integration.
- For legal reasons: we may disclose information when required by law, legal process, court order or lawful government request, or to protect rights, safety and security.
- Business transfer: information may be transferred in connection with a merger, acquisition, restructuring or sale of all or part of the business, subject to applicable law.
6. Payment information
BillDot may record a transaction’s selected payment method, such as cash, UPI or card, along with payment status and invoice details. Unless expressly stated for a particular payment integration, BillDot does not collect or store complete payment-card numbers, CVV codes, UPI PINs, online-banking passwords or similar payment authentication credentials.
Payments processed through a third-party gateway, bank, UPI app or payment provider are also governed by that provider’s terms and privacy practices.
7. Cookies and similar technologies
Our website and web application may use cookies, local storage and similar technologies for:
- login sessions and authentication;
- security and fraud prevention;
- language, theme and user preferences;
- performance monitoring and error diagnosis;
- remembering authorised device or app settings.
Blocking essential cookies may prevent login or cause parts of the service to stop working correctly. We do not use personal data for third-party behavioural advertising unless this policy and any required consent process are updated.
8. Data retention
We retain information only for as long as reasonably necessary to provide the service, maintain legitimate business and accounting records, resolve disputes, enforce agreements, prevent fraud and comply with legal obligations.
Retention periods may vary depending on the type of information and the merchant’s settings or legal requirements. Backup copies may remain for a limited period before being securely overwritten or deleted.
9. Data security
We use reasonable administrative, technical and organisational safeguards appropriate to the nature of the information. Measures may include HTTPS encryption in transit, access controls, role-based permissions, password hashing, session controls, backups, logging and system monitoring.
No internet-based service is completely secure. Users are responsible for protecting passwords, restricting staff access, keeping devices secure and promptly notifying us of suspected unauthorised access.
10. Your privacy rights
Subject to applicable law and verification of your request, you may have rights to:
- request information about personal data being processed;
- request access to or a copy of relevant personal data;
- correct inaccurate or incomplete personal data;
- request erasure of personal data that is no longer required;
- withdraw consent where processing is based on consent;
- raise a grievance or complaint about our handling of personal data;
- nominate another person to exercise rights where applicable.
Some information may be retained where required for tax, accounting, fraud-prevention, legal or contractual purposes. If your information was collected by a merchant using BillDot, we may direct the request to that merchant or assist the merchant in responding.
11. Account and data deletion
Business account owners and authorised users may request account or personal-data deletion by emailing support@thesuperhelt.com with the subject “BillDot Account Deletion Request”.
Please include:
- the registered business or account name;
- the registered email address or phone number;
- whether you want the full account deleted or only specific personal data;
- any details needed to identify the affected account or order.
We may verify identity and authority before completing a deletion request. Deletion may remove account profile information and associated operational data, subject to records we must retain for legal, tax, security, fraud-prevention or dispute-resolution purposes.
12. Children’s privacy
BillDot is a business and commercial service and is not directed to children. We do not knowingly allow children to create merchant or staff accounts. A customer-facing QR menu may be used in a family setting, but it is intended to facilitate an order with the supervising adult or merchant.
If you believe a child has provided personal information without appropriate authorisation, contact us so we can review the matter.
13. Data storage and international transfers
Information may be stored or processed in India or in other countries where our hosting, infrastructure or service providers operate. Where required, we take reasonable steps to ensure transfers are made in accordance with applicable data-protection law.
14. Third-party services and links
The service may link to or integrate with third-party websites, payment providers, WhatsApp or messaging services, map services, delivery platforms, accounting tools or other external services. Their handling of information is governed by their own privacy policies and terms. We encourage users to review those policies before enabling or using an integration.
15. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in the service, technology, law or business practices. The updated version will be posted on this page with a revised “Last updated” date.
Where a change materially affects how personal information is used, we may provide an additional notice through the website, dashboard, app or registered contact details.
16. Contact and grievance requests
For privacy questions, correction requests, deletion requests or grievances, contact:
We may ask for information reasonably necessary to verify identity, account ownership and the scope of the request before responding.