Who you're paying, and what happens to your data

Mavoin is operated by JEEL SOFTWARE CONSULTANCY, a sole proprietorship registered in Ahmedabad, Gujarat, India. That is the name that appears on the Razorpay checkout when you pay, and the party you contract with under the terms.

Legal entity

JEEL SOFTWARE CONSULTANCY

Constitution

Sole proprietorship

GSTIN

24DGLPG6515C1ZP verify on the GST portal

Jurisdiction

Ahmedabad, Gujarat, India

Contact

hello@mavoin.com

We build invoicing software, so it would be odd to hide our own GSTIN. Put it into the government portal and you'll see the registered name, the constitution and the current status — from them, not from us.

Why this exists and who built it is on the about page. It's the story, not the commitments — those are all here.

Your data is stored on Supabase infrastructure in the Mumbai region (ap-south-1), inside India. Every record is scoped to your business with row-level security. PDFs live in private storage and are served only through short-lived signed links.

The region is named on purpose. “Secure cloud infrastructure” tells you nothing; ap-south-1, Mumbaiis something you can hold us to, and it means your GST records don't leave the country to be stored. The same sentence appears on /security and in the privacy policy because it comes from one constant — there is no second, vaguer version of it anywhere on this site.

What we never do

• We do not sell your data, and we do not sell or share your clients' details.
• We do not use your invoice contents to train machine-learning models.
• We do not read invoice contents for marketing, and no advertising tracker runs inside the app.
• Your invoice data is not an advertising asset, because Mavoin has no advertising business — the subscription is the whole revenue model.

What we do measure

On the free invoice generators we record the shape of a session, never its contents: which generator was open, the currency, the supply type, how many line items there were, and how many PDFs you've downloaded. No name, address, GSTIN, description or amount is ever sent. Page analytics (Google Analytics and Microsoft Clarity) run on this marketing site only — never inside the app, where your invoices are.

Every third party that processes data on our behalf, named. There is nothing else in the path.

• Export every invoice, line item and client to CSV from Settings → Data — at any time, on any plan, including the free plan and including an account you've asked us to delete.
• A complete JSON archive and a bulk download of your invoice PDFs come from the same screen.
• No support ticket, no "contact sales", no downgrade penalty. Export is written into the code as free on every plan state, not left out of the paywall by accident.
• Every finalised invoice is a real PDF you can download and keep, for as long as your account exists. Nothing is watermarked and nothing expires.
• The free generators produce complete PDFs without an account at all.

There is no lock-in and never will be. A tool that holds your billing records should be easy to leave, and lock-in is the most damaging thing an unhappy user can truthfully say about a vendor.

Mavoin is run by one person. That's a real risk and pretending otherwise would be dishonest, so here is the commitment in writing instead.

• You get 90 days' written notice, by email, to the address on your account.
• Exports stay free and working for the whole notice period.
• Nothing is deleted before the notice period ends.
• Every paid account switches to free access immediately — you are never paying for a product that is winding down.
• Your invoices are yours. We will not hold them, and we will not put them behind a final payment.

• 30 days of full access to try with real clients. No card required to start.
• Within 14 days of your first paid charge: email hello@mavoin.com and we'll refund you in full. No questions asked.
• No contract, no minimum term and no exit fee — cancel whenever you like. Cancellation is by email today; there is no retention call and nobody will ask you to justify it.
• The price you subscribe at is the price you keep for as long as the subscription stays active. Later price rises apply to new subscriptions, not yours.
• Payments are processed by Razorpay. Your card details go to them and are never seen or stored by Mavoin.

There is no free-forever tier, and we'd rather say so here than let you find out at day 31 — the trade is a tool that handles Indian GST properly at ₹199 a month instead of a free one that can't. The full terms: pricing, refunds, terms.

• Row-level access control on every table; records are scoped to your business.
• Admin credentials never reach the browser.
• TLS in transit; encryption at rest from the cloud provider.
• PDFs held in private storage and served only through short-lived signed links.
• PDFs generated on our servers, not printed by your browser.
• Money stored as integer minor units — paise, never floating point.
• Finalised invoices are immutable snapshots.
• HttpOnly, secure session cookies for the web app.

Connecting Claude

Connecting Claude sends you to Mavoin to sign in and approve access. Your password is never shared with Claude — it receives a scoped token that acts only as you, on your own account, issued over OAuth 2.1 with PKCE (RFC 7636, S256). Refresh tokens rotate, and replaying an old one revokes the whole chain rather than just that token. Removing the connector in Claude's settings revokes access immediately.

The free tools

The free invoice generators run in your browser. What you type stays on your device and the PDF is built there too — that download never passes through our servers. The one exception is explicit and yours to make: if you click "Save this invoice" to carry a draft into a new account, that draft is sent to us so the account can pick it up. Nothing else leaves the page.

Backups

Mavoin runs on Supabase's managed Postgres, which is backed up by Supabase as part of the managed service. We are not publishing a backup frequency, retention window or point-in-time-recovery claim until we can state exactly what our plan provides — a recovery promise we can't hold would be worse than no promise at all. In the meantime, nothing stops you keeping your own copy: every finalised invoice is a PDF you can download and archive.

Found something? hello@mavoin.com — the full write-up is on the security page.

One channel: hello@mavoin.com

• Replies within one working day, Monday to Friday, IST.
• Answered by the person who wrote the code. There is no tier-one queue and no ticket number.
• Bug reports get an acknowledgement and a status, not a canned response.
• Security reports are answered within 24 hours.

What to put in the first email, and which subject line gets the fastest answer, is on the contact page.

Trust pages are usually a list of everything that sounds good. These are the things we could have written and didn't, because they aren't true yet:

• No SOC 2, ISO 27001 or any other audit certification. Mavoin is a one-person product and hasn't been through one.
• No specific backup-recovery guarantee — no frequency, retention window or point-in-time-recovery claim until we can state exactly what our plan provides. See backups above.
• No in-app list of authorised MCP clients. You revoke Claude's access from Claude's connector settings, not from a Mavoin screen.
• No published phone number. Email is the only support channel, and a number we couldn't answer reliably would be worse than none.
• No customer logos, no user counts, no testimonials. When there are real ones, they'll be real.
• No field-level encryption of the bank details on your invoice template yet. They are covered by row-level security and the provider's encryption at rest, which is not the same thing.