Privacy Policy

This Privacy Policy ("Policy") explains how Finflow Technologies Private Limited("we", "us", "our") collects, uses, discloses, and protects information when you use the Finflowwebsite, mobile application, and related services (collectively, the "Platforms" or "Services").

By accessing the Platforms or using the Services, you consent to the practices described in this Policy. If you do not agree, please do not use the Services. This Policy applies to current and former visitors, customers, and trial users.

Information we collect

Account and contact information

• Name, email address, phone number, company name, and city.
• Information you provide during onboarding, checkout, demo requests, or support conversations.

Tally and business data

When you connect Finflow to your Tally desktop, we process business and accounting data required to display reports on mobile. Depending on your configuration and plan, this may include:

• Company profile, ledger groups, party masters, and user access settings.
• Sales, purchases, receipts, payments, outstanding receivables and payables, stock summaries, and cash/bank balances.
• Reports such as day book, trial balance, profit and loss, balance sheet, and GST-related summaries where enabled.
• Voucher metadata and sync timestamps needed to keep mobile views current with your Tally data.

You control what data is synced based on your Tally setup and the permissions you grant within Finflow. We process this data only to provide the Services you subscribe to.

Payment information

• Razorpay payment ID, order ID, plan name, amount, and currency.
• GSTIN and billing details if provided for invoicing.

We do not store full card numbers, UPI PINs, or complete payment credentials. Payment instruments are handled by Razorpay.

Technical and usage data

• Device type, operating system, app version, IP address, and browser type.
• Log data, crash reports, session activity, and performance metrics to maintain reliability and security.
• Cookies and similar technologies on our website for analytics and session management (see Cookies below).

How we use your information

• Provision, activate, and maintain your subscription.
• Sync and display Tally business data on authorised devices.
• Process payments, issue invoices, and handle refund requests.
• Respond to support requests and contact enquiries.
• Send transactional communications (activation, security alerts, billing confirmations).
• Send product updates or offers where permitted; you may opt out of marketing emails at any time.
• Detect fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our terms.
• Improve product performance, features, and user experience.

Tally data: access, security, and retention

• Encryption: Data is encrypted in transit between your Tally connector, our servers, and your mobile device using industry-standard TLS. Data at rest is stored on secured infrastructure with access controls.
• Access controls: Account administrators can manage which users and devices access synced data. We restrict internal access to personnel who need it for support, security, or operations, under confidentiality obligations.
• Backups: We may maintain backups to ensure service continuity and recovery from failures. Backups are protected with equivalent security controls.
• Retention: We retain Tally and account data for as long as your subscription is active and for a reasonable period thereafter to meet legal, tax, and dispute-resolution requirements. You may request deletion subject to the limitations below.
• Deletion: Upon verified request or account termination, we will delete or anonymise your data within a reasonable timeframe, except where retention is required by law or legitimate business needs (e.g. payment records).

Payment data

Payments are processed by Razorpay. When you pay, Razorpay collects payment instrument details according to their privacy policy. We receive only transaction metadata needed to verify your purchase and provide support. See our Payment Terms.

Data sharing

We do not sell your personal information. We may share data with:

• Payment processors (Razorpay) to complete transactions.
• Cloud hosting, email, analytics, and support tools under contract and confidentiality obligations.
• Affiliates or group entities where needed to operate the Services.
• Authorities, courts, or regulators when required by law, subpoena, or to protect rights, safety, and security.
• Successors in the event of a merger, acquisition, or sale of assets, with notice where required by law.

Your information may be processed in India or other jurisdictions where our service providers operate. We take reasonable steps to ensure appropriate safeguards are in place.

Cookies and analytics

Our website may use cookies, local storage, and analytics tools (such as Google Analytics) to understand usage, improve performance, and measure marketing effectiveness. You can control cookies through your browser settings. Disabling cookies may affect certain website features.

Your rights

Under applicable Indian law, including the Digital Personal Data Protection Act, 2023, you may have the right to:

• Access personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure where permitted by law.
• Withdraw consent for processing that relies on consent.
• Nominate another person to exercise rights on your behalf.

To exercise these rights, contact us using the details below. We may ask you to verify your identity before processing requests. We aim to respond within 30 days. Withdrawal of consent does not affect processing permitted or required without consent under applicable law.

Security and breach notification

We implement administrative, technical, and physical safeguards including encryption, access controls, and regular security reviews. No method of transmission or storage is 100% secure.

If we become aware of a breach affecting your unencrypted personal information, we will notify you and relevant authorities as required by applicable law, without unreasonable delay.

Children's privacy

The Services are intended for businesses and authorised adults. We do not knowingly collect personal information from children under 18. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

Voluntary information

If you share personal or sensitive information that we did not request, we are not responsible for any unauthorised disclosure of that information. Please share only what is necessary for your enquiry or account setup.

Tally disclaimer

Finflow is an independent product and is not affiliated with, endorsed by, or sponsored by Tally Solutions Pvt. Ltd. Tally and TallyPrime are trademarks of their respective owners. See our Disclaimer.

Policy updates

We may update this Policy from time to time. Material changes will be posted on this page with an updated date. Continued use after changes constitutes acceptance of the revised Policy.

Contact

Privacy questions? Email privacy@finflow.app or use our contact form.