Is it safe? Security and privacy

#Your data stays on your computer

• Saved as files on your PC. Every invoice, client, product, payment and setting is a file in the Vyapzio books folder: %APPDATA%\vyapzio\books on Windows, ~/Library/Application Support/vyapzio/books on macOS. Saved invoice PDFs go in the Saved Invoices folder inside it.
• No cloud server of ours. We do not run a server that holds your books. There is nothing of yours on our side to leak or to lose.
• People you add on this computer. The owner can add up to four local users in Settings, each with their own sign-in and permissions. Those accounts are stored on this computer, not on a website.
• Google Drive only if you connect it. If you choose to connect your own Google Drive (Settings → Data & Backups → Google Drive), copies of your invoice PDFs and backups go to your Drive. Nothing goes there until you do. See Google Drive.

One honest limit: the data files are not encrypted. Anyone who can sign in to your Windows or Mac account can open that folder, the same as your other documents. Protect the computer with its own password, and see Backups and the app lock.

#It works without internet

Everything you do day to day works offline: making and printing invoices, PDFs, payments, stock, purchases, expenses, reports, GSTR-1 and GSTR-3B files, backups, and reading a supplier's bill from a photo (OCR). Vyapzio is a desktop program, not a website.

Internet is needed only to install it, to activate your licence once, and for the optional things listed below. When you are offline the app simply skips them; your work is not affected.

#Offline mode: never go online by itself

Tick Offline mode in Settings → Privacy & internet. From then on the app makes no automatic internet connection:

• no daily licence check with our server;
• no automatic check for a new version;
• no automatic copy of each invoice PDF to Google Drive.

Things you click still work when you click them: Check for Updates, Update, the ? help pages, Report, and Save to Drive. Activating a licence needs internet once. The setting is kept in the app's data folder, so the app's own server obeys it too.

#Every address the app connects to

This is the complete list. Apart from these, the app talks only to itself on your own computer.

By itself, while the app is open

Offline mode stops the daily licence check and the automatic update check. The 30-day offline pass in your licence keeps the app working meanwhile.

Only when you do something

There is nothing else: no analytics service, no advertising network, no error-tracking service, and no server of ours that receives your business data.

For IT people: the app's Content Security Policy (in src/index.html) limits what the page may load or contact. Licence activation, the daily check and the update feed go through the Electron main process to app.vyapzio.in; Google Drive is called from the page and the app's server.

#No tracking, no ads, nothing sold

• No analytics. The app does not count your clicks, screens or invoices, and does not report how you use it.
• No ads, and no feature you have to pay for a second time.
• No business data sent to us. We never see your invoices, clients, amounts, GSTIN or bank details. The licence service knows your licence, email and this computer's install ID, and nothing about what you bill.

#Why do you charge, and what do you do with the money?

Vyapzio is a paid product: ₹999 once for a lifetime licence, with every update free for life. There is no subscription and nothing renews.

• The licence fee pays for the work. It covers development, support, the licence and update service, and the time that goes into each release. We earn from the licence, not from your data or from advertising.
• No ads and no data selling. We do not sell ads or business data, so there is nothing to collect. Collecting it would also break the one promise the app is built on.
• Built in India by Vyapzio. Paid work for businesses that want custom features or setup is separate and optional. See Help & About.

#Other computers cannot open it

Vyapzio's built-in server listens only on this computer's own internal address, 127.0.0.1, so other computers on your Wi-Fi or office network cannot open the app or read your data.

It also refuses requests from other websites: a web page you visit cannot quietly read your books from the app in the background.

Several people on one computer: the owner can add up to four local users, each with their own sign-in and permissions, in Settings → Users. They share the same books. Use the app lock as well on a computer others can reach. See Several people on one computer.

Using Vyapzio from a different computer at the same time is not supported. Each licence covers one computer. See Moving the licence when you change computers.

#Can I put it on a website or a server?

No, and please don't try. Vyapzio is a desktop application made for one computer. There is no server login, and the built-in server listens only on 127.0.0.1. Putting it online would expose every invoice, client and bank detail to anyone who found the address, and hosting would send your books to someone else's server - the one thing this app promises not to do.

What to do instead: keep the app on one computer and take a backup often. To move to a new computer, see moving to a new computer or moving the licence.

#Check it yourself

1. Switch the internet off. Turn off Wi-Fi (or unplug the cable) and use Vyapzio. Make an invoice, download its PDF, print it, record a payment and open Reports. Everything works apart from the daily licence check, which the 30-day offline pass covers.
2. Turn on Offline mode (above) and leave it on. The app then goes online only when you click something that needs it.
3. Watch its connections. On Windows, open Resource Monitor (Windows key + R, type resmon), open the Network tab and look at Vyapzio.exe. On a Mac, use Activity Monitor's Network tab. With Offline mode on, it has no connections outside your computer.
4. Block it in the firewall. In Windows Defender Firewall's Advanced settings, add an Outbound rule that blocks Vyapzio.exe. The app keeps working; only the licence check and update check stop. Remove the rule when you want to update.

#Licensed, not an anonymous download

Vyapzio is not an anonymous download from a public file host. Every copy is tied to a licence and to one computer. Activation, updates and support come from Vyapzio, so you know where the app came from and who to ask when something goes wrong.

• From us only. Download the installer from app.vyapzio.in/download and nowhere else. Copies forwarded on WhatsApp or posted on other sites are not ours and may have been changed.
• Updates are checked. Each update is downloaded from our own service and verified before it is installed.
• A name behind it. Vyapzio is made by the Vyapzio team. The Help & About page has the support address and the company behind it.

#Is the install safe?

• No administrator rights needed. The Windows installer puts the app in your own user folder and does not change Windows system files or add a Windows service. On macOS you copy Vyapzio into Applications.
• From the official page only. The download page serves the installer directly from our site over a secure (HTTPS) connection, and every update is verified before it is installed.
• Your data is never touched. Installing over an existing copy backs up your books first and replaces only the app's own files. Uninstalling leaves the books folder in place.

Why Windows or the Mac may show a warning

If the app is not code-signed yet, Windows may show "Windows protected your PC" and a Mac may say it cannot check the app. That message means "this program is not signed by a paid certificate". It does not mean a virus was found. See "Windows protected your PC".

#Backups and the app lock

• Daily automatic backups. Every day the app copies all your data into a dated backup and keeps the last 30 days. See Daily backups.
• A copy on another drive. Choose a second folder (another drive, a USB disk, a synced folder) and every daily backup is copied there too, so a failed hard disk does not take your books with it. See Keeping a copy somewhere else.
• Before every update, the app backs up your data first.
• App lock (optional). On a computer others use, turn on a 6 or 8 digit PIN in Settings → Privacy & Security → App lock. The PIN is stored only as a scrambled check value (a salted hash), never as the digits. It locks the app's screens; it does not encrypt the files. See App lock.

#Problem reports

When something goes wrong, the app notes it in the Problem log on your computer. Nothing is sent anywhere by itself.

When you click Report, the app copies the error and your app and computer type to the clipboard, with private details removed: GSTIN, PAN, phone numbers, email addresses, UPI IDs, IFSC codes, long numbers such as bank account numbers, and your Windows user name. You paste that into an email to contact@vyapzio.in, so you see exactly what is sent.

#Updates and security fixes

• Regular updates. New versions arrive often, with urgent fixes sooner. Every update is free for the lifetime of your licence. See Updating.
• Watched for known problems. A known security problem in a library the app uses is fixed in an update.
• Only what the app needs. The installer contains the built app and only the packages its server needs to run. Developer tools are left out.

#What you should do

• Download only from the official page: app.vyapzio.in/download.
• Keep Windows or macOS up to date, and keep its built-in antivirus on.
• Put a password on your computer account, and lock the screen when you step away.
• Take a backup and keep a copy on another drive. See Backups, updates and moving PC.
• Keep your licence key private. It is tied to one computer; if you think it has been shared, contact us.

#Found a security problem?

Email contact@vyapzio.in with the subject "Security report". Say what you found and how to reproduce it, and do not post it publicly first. We will reply and fix it as quickly as we can.