Your books, and who sees them

Where your data sits

Everything we keep, your entries, bank statement lines, reports and your team, is stored in a database in Mumbai, India, run by our database host, Supabase. Your sign-in (your email address and password) is held there too.

The service that reads your files runs in Singapore, the hosting region nearest India, and keeps no copy of them. An uploaded file sits in a temporary folder only while it is read and is deleted straight after, usually within minutes. If something fails part-way, the file is deleted automatically within about 75 minutes.

We cut what we don’t need as data comes in:

• bank account numbers are cut to their last 4 digits;
• any run of 6 or more digits in a bank narration becomes XXXX plus its last 4;
• a PDF password is used once to open the file, and never stored;
• a Google Sheet is read once, from the link you paste; we keep neither the link nor any Google access;
• a Zoho Books connection is read-only, and its access key is stored encrypted with your company’s own key.

Each company’s secrets are encrypted with a key of its own (AES-256-GCM). No AI model reads your books: every figure is calculated from your entries. There are no advertising trackers or third-party analytics on this site. We record only visits and share taps inside the app, to see which parts get used.

Who can see it

Only the people you add to your company. You choose each person’s role: owner, admin, member, accountant (for your CA) or viewer. A viewer can only look. One company never sees another’s data; the database enforces this on every table.

The agent never writes to your books, never moves money and never edits an entry. We run the service and can reach the database to keep it working, but we don’t look at a company’s data unless you ask us to help.

When you share the month’s summary on WhatsApp or by email, you pick who gets it. That text names no customer or supplier. We record that a share happened, not what it said or who it went to.

Monthly emails

On the 2nd of each month, every member of a company gets one email about it, whatever their role, unless they have switched it off. It carries figures: the company’s runway, up to 3 things that need attention with ₹ amounts, and what changed since the month before. It never names a customer or supplier.

Each person can turn it off for each company in Settings, or with the unsubscribe link in any of these emails, no sign-in needed. The emails are sent through our email provider, which receives your email address and the email’s text to deliver it.

Deleting your data

The company’s owner can delete it at any time in Settings → Delete this company, after typing its name. In one step, that destroys the company’s encryption key, deletes every entry, statement, report, invitation and membership, and removes any files. We keep only a record that a deletion happened, with no names and no data.

Copies in our database host’s routine backups disappear when those backups expire. Your sign-in account stays, because you may belong to other companies. Closing it isn’t in the app yet; until it is, we remove it when you ask.