Privacy Policy
⚠ PLACEHOLDER — NOT LEGAL TEXT
The headings below are a checklist of what this page must cover. The owner writes the real content before launch; this banner (and the placeholder notes) must be deleted when that happens. LAUNCH BLOCKER.
[Owner content required — written for the DPDP Act 2023. Cover, at minimum:]
- What is collected at signup (name, email, mobile, company, IP) and why each item.
- What business data the service stores on the customer's behalf (invoices, parties, books) and that the customer owns it.
- Processors used: hosting (Hostinger), email (ZeptoMail/Zoho), AI statement extraction (Anthropic — only when the customer uses that feature), WhiteBooks GSP for e-Invoice/EWB on paid plans.
- Cookies/sessions (login only, no ad tracking); reCAPTCHA on public forms (Google).
- Retention: active accounts kept; expired trials read-only forever; truly-empty accounts removable after 90 days with notice; what happens on account deletion requests.
- The user's DPDP rights (access, correction, erasure, grievance) and the contact for exercising them.
- Security measures in plain words; breach notification approach.