Legal

Privacy Policy

How we collect, use, share and protect your data. Last updated: September 2026.

1. Information we collect

Account information: your name, email address and password (stored as a one-way hash, never in readable form) when you register.
Organization data: tenant, company profiles and Tally masters you create or import.
Business data: vouchers, entries and XML files you generate, including import history and export records.
Payment information: plan, amounts, transaction references (such as UTR numbers) and payment status. Card/UPI credentials are processed directly by our payment partner Razorpay — we never store your card numbers or UPI PIN.
Technical data: login activity, audit logs and basic device/browser information required to operate and secure the platform.

To provide the import, validation and XML-generation workflows you signed up for.
To manage subscriptions, verify manual UPI payments and issue invoices.
To send transactional emails (verification, password resets, payment updates).
To detect misuse, enforce plan limits and keep the platform secure.

We do not sell your data. We share limited data only with: Razorpay (to process online payments), and email delivery providers (to send transactional emails).
We may disclose information if required by applicable law.

Passwords are hashed with bcrypt; SMTP and payment secrets are encrypted at rest.
Access is controlled through role-based permissions and per-tenant isolation.
All traffic is served over encrypted HTTPS connections.

Your data is retained while your account is active. You may request export or deletion of your account data by raising a support ticket after logging in.
Backups may retain copies for a limited operational period.

We use strictly necessary cookies for login sessions and security (CSRF protection). We do not use advertising trackers.

For privacy questions, log in and raise a support ticket, or email us from your registered email address. Grievance requests are addressed within 30 days.