Privacy Policy
Last updated: August 2026
What we collect
- Account data: name, email and password (stored only as a secure hash).
- Business data you enter: business profile, GSTIN, parties, invoices, expenses, inventory and bank transactions, including bank statements you upload for reconciliation.
- Usage and technical data: log-ins, device/browser metadata and cookies required for sessions.
How we use it
- To provide the service: accounting records, GST reports, PDFs, statement reconciliation and dashboards.
- To process subscription payments and send transactional emails (welcome, invoices, receipts, password resets, support replies).
- We do not sell your data or use your business data for advertising.
Third-party processors
- Cashfree Payments — subscription billing and auto-debit mandates.
- Resend — transactional email delivery.
- Emergent / cloud hosting — infrastructure and database hosting.
- Emergent-managed Google sign-in — if you choose social login.
- Each processor handles data per its own privacy policy and only as needed to deliver the service.
Storage, security & retention
- Data is stored in encrypted-at-rest databases with TLS in transit. Passwords are bcrypt-hashed; sessions use secure cookies.
- Bank statement files are processed for parsing and not shared with third parties.
- We retain your data while your account is active. You may request deletion of your account and data by emailing us; legal/financial records may be retained where required by law.
Your rights
- Access, correct or export your data from within the app (settings and report exports).
- For access, correction or deletion requests, contact dsc@comfile.in.
Changes
- We may update this policy; material changes will be posted on this page with a revised date.