← Back to KhataCopilot

Privacy Policy

Effective 13 September 2026 · Version 1.0.0 · Draft — must be reviewed by a lawyer before store submission. Replace every [bracket] with your registered details.

1. Who we are

KhataCopilot ("the app") is operated by [Your Registered Entity Pvt. Ltd.], [Full registered office address, City, State, PIN, India]. Contact: abhishek@khatakopilot.store, [+91-XXXXXXXXXX]. Grievance Officer (IT Rules 2021): [Full Name], [grievance@yourdomain.com], [+91-XXXXXXXXXX] — responds within statutory timelines.

2. What stays on your device

Your ledger, parties, items, invoices and preferences live in on-device storage. Core bookkeeping, voice parsing (offline engine), soundbox announcements and daybook work with no internet. We do not upload your books unless you explicitly enable cloud sync.

3. What we process, and why

  • Audio (mic): transcribed to ledger entries, then discarded. Desktop builds may use a cloud speech key you supply.
  • Camera/photos: receipts read on-device for totals + GST split; UPI success screens checked for forgery tells. Images are not warehoused.
  • Notifications (only if you grant access): UPI payment texts from GPay/PhonePe/Paytm parsed into amount · app · merchant and merged into your ledger. No bank credentials are ever touched; the app never moves money.
  • Contact/listing data you type: names, phones, GSTINs — needed for khata, invoices and ONDC catalogs.

4. Cloud processors (only when you enable them)

Complex voice lines may go to Groq (LLM inference); sync uses Firebase/Supabase REST; invoice shares go through apps you choose (e.g. WhatsApp). Each is a separate processor — sign Data Processing Agreements with them before release and list them here with regions.

5. Your rights (DPDP Act 2023)

Access, correction, nomination and erasure on request. Delete in-app via Profile → Delete Account & All Data (wipes the on-device ledger) or use the deletion request page for the cloud copy. Consent is versioned — material policy changes re-ask you inside the app.

6. Children, retention, security

Business tool for 18+. We keep on-device data until you delete it; cloud copies die with your deletion request (see page for timelines). Transport is HTTPS; on-device protections are the OS lock + app PIN/biometric gate. No method is perfect — keep your OS updated and your device PIN private.

This is a well-structured first draft, not legal advice. Mirror this text in-app (Legal & Compliance screen) and keep both copies identical.