Privacy Policy

01 Who this policy covers

This policy applies to three groups: practices (CA firms, accounting and bookkeeping practices) that hold an account; the partners, staff and other users those practices invite; and the practice’s own clients, whose documents and financial records are uploaded to the platform.

For the financial data of a practice’s clients, the practice decides why and how that data is processed. We process it on the practice’s instructions to provide the service. For account and website data, we decide how it is used, as described below.

02 What we collect

Account data: names, work email addresses, firm name, role, and the details entered at sign-up or through the contact form.

Client financial data uploaded by or for a practice, which may include:

• Purchase and sales invoices, credit and debit notes, expense bills
• Bank and card statements, including account numbers and transaction narrations
• GST registrations, GSTR-2B and other return data downloaded by the practice
• Charts of accounts, ledgers, supplier and customer masters

Usage data: log-in times, actions taken in the product, and the audit trail of preparation, review and approval, which forms part of the service itself.

03 How we use it

To read, code, reconcile and prepare records for the practice that uploaded them; to show status, deadlines and workload to authorised users; to send account emails such as login details and service notices; and to keep the platform secure and working.

Coding patterns learned from corrections are used only for the same client entity. One client’s data is not used to prepare another client’s books, and client financial data is not used to train general-purpose models.

We do not sell personal data or client financial data, and we do not use it for advertising.

04 Sharing

Data is shared only with the users a practice authorises, and with service providers we rely on to run the platform, such as hosting, storage and email delivery. These providers process data under written obligations of confidentiality and security.

We may disclose data where required by Indian law or a lawful order of a court or authority. Where permitted, we will tell the affected practice first.

05 Security

Data is encrypted in transit and at rest. Each client entity’s data is logically isolated. Access is role-based and every change is recorded in an audit trail that users cannot edit. Saved statement passwords are stored encrypted and used only to open that client’s statements.

06 Retention and deletion

Client financial data is kept for as long as the practice keeps the client on the platform. When a practice removes a client or closes its account, it can export the data first. Data is then deleted from active systems, and from backups as they cycle out.

Account and audit records may be kept longer where needed to meet legal, tax or dispute obligations.

07 Your rights

Under the Digital Personal Data Protection Act, 2023 and other applicable law, individuals may ask to access, correct or erase their personal data, and may withdraw consent where processing relies on it. Requests about a practice’s client data are best made to that practice, and we will help them respond.

Requests can be made through the contact page. We will verify the request before acting on it.

08 Cookies

The website uses only the cookies it needs to work, such as a session cookie that keeps the spam check on forms valid. We do not use advertising or cross-site tracking cookies.

09 Changes

If this policy changes in a way that affects how client financial data is handled, account holders will be told by email before the change takes effect.