New to billing software? Get free setup help on a call: we'll set up your invoice format and first items with you. Book a slot

Log in Book a demo Start free

Legal

Privacy policy

What we collect when you use Parchi, why we collect it, and the choices you have.

Template — have it reviewed before launch. This text is a starting point written for this product. It is not legal advice and must be reviewed by a qualified lawyer before the service is offered to the public.

Last updated: [date]

1. Who we are

Parchi is an online billing and accounting service operated by Parchi Technologies ("we", "us"). This policy explains how we handle personal data when you visit this website or use the Parchi application. For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the data fiduciary for account data. For the records you enter about your own customers and suppliers, we process that data on your behalf and according to your instructions.

2. Data we collect

  • Account data: your mobile number and name, used to create your account and sign you in.
  • Business details: business name, address, state, GSTIN, PAN, contact details, logo and signature, and similar details you add in settings.
  • Records you enter: invoices and other documents, parties (customers and suppliers) and their contact, tax and bank details, items and stock, payments, expenses and notes.
  • Technical data: IP address, device and browser type, and timestamps of requests, kept in server logs for security, troubleshooting and abuse prevention.
  • Messages to us: what you send when you email or call support.

3. How we use it

  • To provide the service: create documents, calculate tax, keep balances and stock, and produce reports.
  • To sign you in and keep your account and business data secure.
  • To send service messages, such as one-time sign-in codes and messages you choose to send to your parties.
  • To answer support requests and improve the product.
  • To meet legal obligations, such as responding to lawful requests from authorities.

We do not sell personal data and we do not use your business records for advertising.

4. Sign-in codes and SMS

We sign you in with a one-time code sent to your mobile number. To deliver these codes, and any SMS you choose to send from the product, we share the mobile number and message text with SMS delivery partners who are bound to use it only for delivery.

5. Cookies and local storage

We use one sign-in session cookie. It is marked HTTP-only so scripts on the page cannot read it, and it is needed for the application to work. The website also uses your browser's local storage for small preferences, such as remembering that you dismissed a banner. If you use the application on a device, it keeps a copy of recently viewed records, drafts started offline and assistant conversations in that browser's storage so they open without a connection; signing out deletes them from the device. We do not use advertising cookies or third-party trackers.

6. Who we share data with

  • Service providers who host our servers, deliver SMS or email, or help us operate the service, under contracts that limit their use of the data.
  • Our AI provider, only when you use an optional AI feature: a bill you upload for scanning, or a question you ask with the report figures needed to answer it, is sent to the provider to produce the result. Party phone numbers and GSTINs are left out of questions unless you name the party. [Name the provider and its data-retention terms.]
  • People you choose: team members you add to your business, and parties you share an invoice or link with.
  • Authorities when required by law or a valid legal process.

7. How we protect it

Traffic between your browser and our servers is encrypted. Each business's data is kept separate and every request is checked against the business you belong to. Party bank account details are encrypted at rest. Access inside your business is controlled by the roles you assign. No system is perfectly secure; if we become aware of a breach affecting your personal data, we will notify you and the authorities as the law requires.

8. Retention and deletion

We keep your data while your account is active. Tax law may require you to keep invoices and books for several years, so please download what you need before closing an account. When you ask us to delete your account or a business, we delete or anonymise the data within [30] days, except where we must keep it longer by law. Backups are overwritten on a rolling basis.

9. Your rights

Under the DPDP Act you may:

  • ask for a summary of the personal data we hold about you and how it is used;
  • ask us to correct, complete or update it;
  • ask us to erase it, subject to legal retention requirements;
  • withdraw consent where processing is based on consent;
  • nominate another person to exercise your rights in case of death or incapacity; and
  • raise a grievance with us, and if it is not resolved, with the Data Protection Board of India.

10. Grievance officer

Name: [Name]
Email: support@example.com
Address: [Registered office address]

We aim to acknowledge grievances within [48 hours] and resolve them within [30] days.

11. Changes to this policy

If we make material changes, we will update the date above and tell you in the application or by SMS or email before the change takes effect.

12. Contact

Questions about this policy: support@example.com.