1. Who we are
OptiBill AI Technologies LLP runs optibill.in. In the language of the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary and you are the Data Principal. In plain terms, your data is yours and we are looking after it.
We audit MSEDCL electricity bills against the tariff orders published by the Maharashtra Electricity Regulatory Commission. If you ask us to, we also raise a grievance with MSEDCL on your behalf.
2. What we collect
Things you give us
- Your account details. Name and mobile number. Email if you choose to add one.
- Your bills. Photos or PDFs, including both sides.
- Everything printed on those bills. The registered consumer's name, supply address, consumer number, billing unit, meter number, sanctioned load, tariff category, meter readings, units, every charge line, arrears and payment history.
- Proof that you pay the bill, but only if you are a tenant or occupier rather than the person named on it.
- Whatever you write to us when you need help.
Things we work out
- Audit results and the calculations behind them.
- Grievance drafts, filings, and letters to and from MSEDCL.
- The declaration you accepted and the record of you confirming it by OTP.
Things we pick up automatically
- The basics needed to keep a website running. Device type, browser, rough region, and server logs.
3. Why we collect it, and on what basis
| What we do | What we use | Basis under the DPDP Act |
|---|---|---|
| Read your bill and check it against MERC tariffs | Bill photos and the figures on them | Your consent |
| Work out which meter a bill belongs to | Consumer number, billing unit, address | Your consent |
| Raise a grievance as your representative | Name, consumer number, address, bills, declaration, proof of payment | Your consent, given separately for each meter |
| Run your account and send service messages | Name, mobile, email | Our contract with you |
| Take payment and issue receipts | Name, mobile, payment reference | Our contract, and tax law |
| Answer your questions | Whatever the question is about | Legitimate use |
| Keep tax and accounting records | Transaction records | Legal obligation |
We do not sell your data. We do not build advertising profiles from your bills. And we do not pass your details to anyone who wants to sell you solar panels, loans or appliances, which is the usual fate of an electricity bill in the wrong hands.
4. How your bill photos are read
We use Google's Gemini models to read the text off your bill. That means the photo you upload is sent to Google and processed on Google's servers, which may sit outside India. The figures come back to us and are stored in our own database.
Uploading a bill means you agree to this. If you would rather that did not happen, please do not upload a bill, because there is no version of this service that works without reading it.
We use Google's paid API. Google states that content sent through the paid service is not used to train its models. That is Google's commitment, published in Google's own terms, and we cannot give you a promise on their behalf beyond what they say themselves.
5. Who else sees your data
| Who | What they get | Why |
|---|---|---|
| MSEDCL, its Internal Grievance Redressal Cell, the Consumer Grievance Redressal Forum, and the Electricity Ombudsman | Your name, consumer number, address, the bills in dispute, the findings, and your declaration | This is the complaint itself. It cannot be filed anonymously. |
| Google (Gemini API) | The bill photo | Reading the text on it |
| Supabase | Account and bill data | Our database and file storage, hosted in Mumbai |
| Razorpay | Name, mobile, email, amount | Taking payment |
| Our WhatsApp provider | Your mobile number and the message | Sending your OTP and service updates |
| Vercel | Server request logs | Serving the website |
| Our accountant, auditor, or a court | Only what is actually required | Where the law requires it |
6. How long we keep it
- While your account is open, we keep your bills and audits so your history stays there when you want it.
- When you close your account, we delete or anonymise your data within 90 days, with one exception below.
- Grievances we have filed are different. We keep the complaint file, your declaration and the supporting bills for three years after the matter closes. These are the papers that prove we were allowed to act for you. If anyone ever questions the filing, they protect you as much as us.
- Financial records stay for eight years, because tax and company law say so.
7. Your rights
Under the DPDP Act you can:
- Ask what we hold about you, and who we have shared it with.
- Correct anything wrong. Please do use this one. An audit run against a wrong consumer number is worth nothing.
- Have it deleted, subject to the retention periods above.
- Take your consent back whenever you like. That stops us doing anything further. It cannot unwind a complaint already sitting with MSEDCL, because only MSEDCL or the forum can withdraw that, though we will help you do it.
- Nominate someone to exercise these rights if you die or become unable to.
- Complain to our Grievance Officer, and after that to the Data Protection Board of India.
Write to privacy@optibill.in from your registered email or mobile. We reply within 30 days.
8. How we protect it
- Everything travels over HTTPS. Data is encrypted in transit and at rest.
- Bill photos, evidence and complaint files sit in private storage. There is no public link to them, ever. Access happens through short-lived signed links tied to your account.
- Our database enforces row-level security, so one account simply cannot read another account's rows.
- The number of people with access to live data is as small as running the service allows.
No system is perfectly secure, and we are not going to pretend otherwise. If something happens that is likely to affect you, we will tell you, and we will tell the Data Protection Board, as the law requires.
9. Children
OptiBill is for adults. We do not knowingly collect data about anyone under 18. If you think a child has given us something, write to us and we will delete it.
10. Grievance Officer
As required by the DPDP Act and the Information Technology Act, 2000:
Name: GRIEVANCE OFFICER NAME
Designation: Grievance Officer, OptiBill AI Technologies LLP
Email: grievance@optibill.in
Address: REGISTERED ADDRESS
We acknowledge complaints within 48 hours and resolve them within one month.