Privacy policy

Last updated 16 October 2026

SlipKhata is operated by Vireosol. It turns payment slips and payment messages that a business forwards on WhatsApp into ledger entries. This policy explains what we collect, why, and the choices you have.

Who this covers

• Account holders: the shop owners and staff who sign up for SlipKhata.
• Linked senders: phone numbers a shop links to its account so they can forward slips to our WhatsApp number.
• People named on slips: customers and vendors whose names, phone numbers or account details appear on the slips a shop forwards.

What we collect

• Account details: name, email address, password (stored hashed), shop name and settings.
• WhatsApp data: the sender's phone number and the messages, images and PDFs sent to the SlipKhata number, plus delivery status from WhatsApp.
• Payment data read from slips: amount, date, transaction ID, payment channel, and sender/receiver names, phone numbers and account numbers.
• Ledger data the shop enters or confirms: parties, opening balances, entries and their history.
• Technical data: IP address, browser and log records needed to run and secure the service.

How we use it

• To read slips, match them to the shop's customers and vendors, and post ledger entries.
• To reply on WhatsApp with confirmations and questions, and to send account emails (verification, password reset, alerts).
• To prevent duplicate entries, investigate errors, and keep an audit trail of every change to money records.

We do not sell personal data and do not use it for advertising.

Who processes it

• Meta (WhatsApp Business Platform) carries messages between WhatsApp and SlipKhata.
• Anthropic (Claude API) reads slip images and messages to extract payment details. Each shop uses its own Anthropic API key, under that shop's agreement with Anthropic.
• Our hosting and email providers store the data and deliver email on our behalf.

We share data with others only when the law requires it.

How long we keep it

Ledger entries, slips and their audit history are kept while the shop's account is active, because they are financial records. Messages from numbers that are not linked to any shop are kept for up to 30 days and then deleted. When a shop closes its account, its data is deleted within 30 days, except where the law requires us to keep it longer.

Security

Data is sent over HTTPS. Slip images are stored privately and shown only through expiring links to the shop's own users. API keys and access tokens are stored encrypted. Each shop can see only its own data.

Your choices and data deletion

• A shop owner can edit or export their data and can ask us to close the account and delete it.
• A linked sender can stop at any time by asking the shop to remove their number, or by contacting us.
• If your details appear in a shop's ledger, contact that shop first. You can also contact us and we will pass on and help with the request.

To ask for access or deletion, contact us with the phone number or email address involved. We reply within 30 days.

Email: slipkhata@vireosol.com

Changes

If we change this policy we will update the date above, and tell account holders by email about significant changes.