Your books are yours. We just run the software

Three buckets, and nothing beyond what running the service needs.

• Account and organisation details you provide when signing up or configuring your workspace — names, work emails, GSTIN, CIN, and team roles.
• The records you create in the product: transactions, invoices, chart-of-accounts data, documents, and eSign audit trails.
• Operational telemetry needed to keep the service secure and reliable, such as authentication events, device and IP metadata, and service diagnostics.

To run the product you asked for, and to keep it working.

• To provide the ledger, invoicing, GST and MCA filing, document, and eSign features you explicitly use.
• To secure accounts, prevent abuse, troubleshoot failures, and improve product quality.
• To support billing, customer support, and account-related product communications.
• AI features process your records to draft entries, categorise transactions, and answer questions about your books. Your data is not used to train third-party foundation models.

A short, specific list — and one firm commitment.

• With infrastructure and service providers that help us run authentication, payments, storage, analytics, and communications, under contracts that restrict their use of it.
• With certifying authorities such as eMudhra when you use Aadhaar eSign, and with statutory portals when you ask us to file on your behalf.
• When required to comply with law, enforce our terms, or protect the security of the service and its users.
• We do not sell your accounting data. Ever.

Encryption, least privilege, and immutable audit logs.

• Data is encrypted with 256-bit AES at rest and TLS 1.3 in transit.
• Access by our team is role-restricted, logged, and granted only where support or debugging requires it.
• Signature audit logs, IP hashes, and timestamp certificates are stored immutably.

How long we keep records, and what you can ask us to do.

• We retain data for as long as needed to provide the service and to meet statutory record-keeping obligations under Indian tax and companies law.
• You can export your ledgers and documents at any time, and for 30 days after cancellation.
• You can request access, correction, or deletion of personal data by writing to us. We respond within 30 days, subject to records we are legally required to keep.