Draft for legal review, not yet in force.

Privacy policy

Last updated 27 October 2026

This explains what [Registered company name] ("Ledgrow", "we") collects when you use Ledgrow, why, who receives it, how long we keep it, and the rights you have under the Digital Personal Data Protection Act, 2023 (DPDP Act) and its Rules.

Two roles: yours and ours

• Your own account. For the personal data of the people who sign in (name, email, mobile), Ledgrow is the Data Fiduciary: we decide how it is used, and this policy applies directly.
• The people in your books. Your staff, customers and suppliers are your data. For them, your business is the Data Fiduciary and Ledgrow is your Data Processor: we store and process their data only to run Ledgrow for you, on your instructions. You are responsible for having a lawful reason to record it and for giving them any notice the law requires.

What we collect

• Sign-in: your email address, and your mobile number if you sign in by SMS. We send a 6-digit one-time code, valid for 10 minutes. There is no password.
• Your business: business name, address, GSTIN, PAN and bank details you add, your plan and payment status.
• Your books: everything you enter or upload: customers and suppliers, invoices, bills, payments, stock, expenses, payroll and files.
• Your staff, as your processor: names, contact details, salaries, attendance, PAN, UAN, ESIC number and bank details, used to run payroll, PF and ESI.
• Connections you switch on: your e-way bill API login (kept encrypted), your GST portal session, and bank data you approve through Setu.
• Technical records: when you sign in, calls Ledgrow makes to outside services for your business and whether they worked, and an edit log of each invoice. For SMS sign-in we keep a scrambled (hashed) form of the number in our logs, not the number itself.

Why we use it

• To run Ledgrow for you: keep your books, work out GST, TDS and payroll, and make the files you or your CA need.
• To send what you ask us to send: invoices by email, bills, reminders and payslips on WhatsApp, payment links.
• To sign you in and keep your account and books secure, including stopping misuse.
• To bill you for your plan and keep the tax records the law asks of us.
• To support you, as explained under "Who can see your books".

We do not sell your data, use it for advertising, or share it with anyone for their own purposes.

Consent and legitimate uses

We process your account data because you give it to us to use Ledgrow (a legitimate use under section 7 of the DPDP Act) and, where we ask for it, with your consent. Some things we do only with a separate yes from you: support access to your books, reading a supplier bill with Anthropic, linking your bank, and connecting the GST or e-way bill portal. You can withdraw any of these at any time; it does not affect what was done before.

For your staff, payroll generally runs under the employment legitimate use in section 7 of the DPDP Act. For customers and suppliers, decide your own basis; we follow your instructions.

Where it is stored

Your books are stored with Supabase in its Mumbai (India) region, encrypted in transit and at rest. Each business's books are walled off: only people added to that business can read them.

Outside services we use

These service providers receive only what they need for the job below, under their own contracts and security commitments. A service is used only once it is switched on, and most are used only when you take an action.

Data processed outside India

Some of these services process data outside India: Anthropic (bills you ask us to read), Meta (WhatsApp messages), Resend (emails) and the website host's global network. The DPDP Act allows personal data to be transferred outside India, except to countries the Government of India restricts by notification. We will not transfer data to a restricted country. Your books themselves stay in Supabase's Mumbai region.

Who can see your books

• You and the people you add, with the role you give them: owner, accountant (staff) or partner CA. Only the owner can add or remove people and change the business's bank details and GSTIN.
• On the Managed plan, our accountant and a partner Chartered Accountant work in your books to keep them and file your returns. Partner CAs are independent professionals bound to confidentiality.
• Ledgrow support, only if you allow it. Our staff can see that your business exists and how actively it is used (counts and dates, never amounts). They can see your books only after the owner switches on "Share my books with Ledgrow support" in Settings, for 1 to 7 days. They can look, never change anything. Every look is recorded and shown to you in Settings, and you can switch sharing off at any time.
• The government, only when the law requires it.

Money and payments

Invoice payment links, on paid plans, are created on Ledgrow's Razorpay account. Your customer pays by UPI or card on Razorpay's page. Amounts collected through Ledgrow payment links are received in Ledgrow's Razorpay account and settled to you as agreed in your plan, less Razorpay's fees: [settlement terms to be confirmed].

Otherwise Ledgrow does not move your money. Tax, salary and supplier payments are made by you through your own bank or the government's portals; Ledgrow prepares the figures and files and records what you paid.

How long we keep it

• We keep your books while your account is open. The edit log of each invoice is add-only: entries are never changed or removed while the books exist.
• Businesses must keep accounting records for several years (for example, GST records for 72 months), so we do not delete books automatically while your account is open.
• If you close your account, we delete your books within 90 days, unless the law requires us to keep them longer. You can download your data before you leave.
• Our own billing and tax records are kept for as long as tax law requires.

How we protect it

Encryption in transit and at rest, books walled off per business, roles that limit who sees what, sign-in by one-time code, portal passwords kept encrypted, daily limits on calls to outside services, and logs of sensitive actions. More on our security page.

Your rights

• Access: ask what personal data we hold about you, how we use it, and who we have shared it with.
• Correction and erasure: have it corrected, completed or updated, or erased when it is no longer needed and the law does not require us to keep it.
• Withdraw consent: for anything you agreed to, for example switch support sharing off or disconnect a portal.
• Nominate: name someone to exercise these rights if you die or cannot act.
• Grievance: complain to our grievance officer, and if you are not satisfied, to the Data Protection Board of India.

If you are a staff member, customer or supplier of a business that uses Ledgrow, please ask that business first: it decides about your data. We will help it answer you.

Grievance officer

[Name of grievance officer], [grievance@ledgrow.in], [Registered office address]. We acknowledge within 7 days and resolve within 90 days. For anything else write to [privacy@ledgrow.in].

If something goes wrong

If a personal data breach affects your data, we will tell you without delay, in plain language, with what happened, what it means for you and what we are doing about it, and we will inform the Data Protection Board as the law requires.

Cookies and your device

Ledgrow keeps your sign-in and small preferences (like language) in your browser's storage so you stay signed in. We do not use advertising or tracking cookies, and we do not run third-party analytics on your books.

Children

Ledgrow is for businesses and is not meant for anyone under 18. We do not knowingly collect children's data.

Changes

If we change this policy in a way that matters, we will tell you in the app or by email before it applies. See also our terms of use.

Contact

[Registered company name], [Registered office address]. CIN [CIN], GSTIN [GSTIN].
Email [support@ledgrow.in], phone [Support phone number].