Privacy Policy
Version 2026-10
Draft for review by a lawyer before launch. Replace the bracketed details with the operating company's.
This policy explains how [Company name] handles personal data, in line with the Digital Personal Data Protection Act, 2023.
What we collect
- Firm and staff details you enter: names, email addresses, mobile numbers, roles.
- Your clients' data you store: identity numbers (PAN, GSTIN, masked Aadhaar), contacts, documents and compliance records.
- Usage and security records: sign-ins, IP addresses and an audit trail of changes.
Why
To run the service you subscribed to, keep it secure, bill you, and send the reminders and notifications you configure. We don't sell personal data or use it for advertising.
Where and how long
Data is stored in India and encrypted in transit and at rest. It is kept while your account exists; after you close it we delete it within [90] days, except records we must keep by law (e.g. tax invoices).
Your rights
You can access, correct and export your data from the app, and ask us to erase it. For your clients, your firm is the data fiduciary and we act as processor.
Contact
Grievance officer: [name], [email], [address].