Privacy Policy

1. Information We Collect

Account information: Name, email address, phone number (WhatsApp), and billing information when you create an account or make a purchase.

Statement data: PDF bank statements you upload for processing, including transaction details, account numbers, and balances.

Usage data: Pages processed, features used, and interaction logs to improve our Service.

2. How We Use Your Data

• To process and convert your bank statements into the requested output format
• To improve our AI extraction accuracy through anonymized aggregate analysis
• To communicate with you about your account, billing, and service updates
• To provide customer support and troubleshoot issues
• To detect and prevent fraudulent or abusive use of the Service

3. Data Storage & Retention

Uploaded bank statements and their extracted outputs are stored securely in Azure Blob Storage (Mumbai region) encrypted at rest using AES-256 encryption. Data is retained for 7 days after processing, after which it is automatically and permanently deleted. Processed output files (XML, CSV) remain accessible in your account history during the retention period.

4. Data Sharing

We do not sell, trade, or share your personal or financial data with third parties except:

• Azure Document Intelligence: To process PDF extraction (statements are sent directly from our servers to Azure's API)
• Razorpay: For payment processing — we never store your credit card details
• Legal requirements: If required by law or to protect our rights

5. Data Encryption

• In transit: All data transmitted between your browser and our servers is encrypted using TLS 1.3
• At rest: All stored data is encrypted using AES-256 encryption
• API keys: Third-party API credentials (Azure, Razorpay) are stored as encrypted environment variables

6. Your Rights

You have the right to:

• Access your personal data and transaction history
• Delete your account and associated data (within 30 days)
• Export your processed data at any time
• Withdraw consent for data processing (subject to contractual obligations)
• Request correction of inaccurate personal information

7. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party analytics. Session tokens are stored securely as HTTP-only cookies.

8. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email and through a notice on our website. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related inquiries, please contact our Data Protection Officer at support@tallyport.app.