Privacy Policy
Effective 10 September 2026
1. Who we are
BizFinAI is operated by Appmetry Technologies LLP, a limited liability partnership registered in India, at [Registered office address — to be confirmed before launch]. We are the data fiduciary for the personal data described below.
Grievance Officer: [Grievance Officer name — to be confirmed before launch], reachable at privacy@bizfin.ai.
2. What we store
- Account data: your name, mobile number and email address, the organization you belong to, and your preferences.
- Synced books, for the companies you choose in the connector: ledger and party masters, stock masters, vouchers with their lines, monthly ledger balances, bills outstanding, godown stock, and report summaries.
- Never: your Tally company files, or the raw XML the connector reads from them.
3. Where it is stored
On servers hosted by DigitalOcean in Bangalore, India. Data travels over TLS. Database backups are encrypted with a key we hold and are deleted after 14 days; they are stored in [Backup storage region — to be confirmed and pinned before launch].
4. Why we store it
To answer your questions and render your dashboards when your PC or Tally is off. That is the whole purpose. We do not sell your data, and we do not train any model on your books or use them to improve BizFinAI for anyone else. Section 5 covers the model providers, who are a separate question.
5. Who processes derived data
Answering a question in plain language requires an AI model. The configured model provider — OpenAI, Anthropic, Google, or a self-hosted model — may operate outside India. Only the excerpt needed for the answer is sent, never the whole store. Party contact details are sent only when the question you asked needs them.
A provider processes that excerpt on our instructions to produce the answer, and what it may retain or learn from is governed by the terms of the plan we hold with it: [Model provider plan and its data-retention/training terms — to be confirmed before launch]. Ask us which provider is configured for your organization and we will tell you.
6. How long we keep it
Until you tell us not to. Turning off cloud sync in Settings puts the synced copy of your books beyond use at once — nothing can read it from that moment — and erasure from the database follows within minutes. Encrypted backups containing it are deleted within 14 days. To close your account and remove your account data as well, write to us (section 7); there is no self-service button for that yet.
7. Your rights
Under the Digital Personal Data Protection Act, 2023 and the rules made under it in 2025, you may:
- ask for access to the personal data we hold about you;
- ask us to correct or complete it;
- ask us to erase it;
- withdraw your consent to cloud sync at any time — the switch in Settings is that withdrawal, and it takes effect immediately;
- nominate someone to exercise these rights on your behalf in the event of death or incapacity;
- raise a grievance with our Grievance Officer, who responds within 30 days, and escalate to the Data Protection Board of India if you are not satisfied.
Write to privacy@bizfin.ai for any of these. We answer access, correction and erasure requests within 30 days.
8. Security
Access to production data is restricted to the engineers who operate the service and is logged. Each organization's data is isolated at the database level. If a breach affects your data, we notify you and the Data Protection Board of India as the DPDP rules require; the steps we follow are set out in our internal incident runbook.
9. Changes
We will post any change to this policy on this page and update the effective date above. Check that date to see whether anything has changed since you last read it.