Last updated: draft, pending legal review.
Account information (email, hashed password — we never store your password in plain text), prop-firm payout and invoice records you upload or enter, FIRC/e-BRC bank advice documents you upload for OCR extraction, and technical data needed to operate the service securely (session and refresh-token metadata, audit logs of administrative access to your data).
Fields containing PAN, bank account numbers, IFSC codes, or Digital Signature Certificate (DSC) serial/metadata are stored with column-level encryption and are never written to application logs, error-tracking payloads, or database backups exported outside primary encrypted-at-rest storage.
To compute FX-converted, tax-relevant figures from your uploaded documents; to prepare GSTR/ITR-adjacent exports for your own filing or a Chartered Accountant's use; to operate, secure, and improve the platform; and to communicate service-related notices to you.
Support staff and platform administrators do not have silent access to your data. Any administrative read or write that bypasses your account's normal data isolation is logged, including who accessed what and when.
We retain your data for as long as your account is active. After you request account deletion, retention happens in two stages, to match different statutory recordkeeping requirements:
Each right is available directly in-product via account settings, not only by written request.
We use licensed third-party providers for payment processing, and (where applicable) document extraction and Digital Signature Certificate verification. We do not sell your personal data.