Privacy Policy
In short: your business's books belong to your business, which decides what is synced and kept; we process them only to run SakhaSync for you. We keep your login details to run your account. Data is stored in India; questions to Ask SakhaSync are processed by an AI provider that may be outside India. We don't sell personal data.
1. Who we are and our role
1.1 This Privacy Policy explains how Intellivane Technologies ("Intellivane", "we") handles personal data in connection with SakhaSync (the "Service"), and should be read with the Terms of Service.
1.2 Books and business data. For data synchronised from a customer's accounting software or otherwise submitted by a customer ("Customer Data"), including details of the customer's own customers, suppliers and employees, the customer business is the Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act"), and Intellivane acts only as its Data Processor. The customer determines what is collected and why, is responsible for giving any notice and obtaining any consent required, and is the point of contact for individuals about that data.
1.3 Account data. For the personal data of the people who use the Service (names, email addresses, login and usage records), Intellivane determines the purpose and means of processing in order to provide and secure the Service.
2. What we process
- Account and contact data: name, email address, role, the business and companies you can access, invitation and password-change records (passwords are stored only as salted hashes).
- Security and usage data: login times, IP address, browser information, actions taken in the Service (for example which report was opened or exported), and connector status.
- Customer Data: ledgers, vouchers, bills, stock, tax ledgers and party details synced from the customer's accounting software; customer email addresses entered for payment reminders.
- Ask SakhaSync: questions typed or spoken, and the answers, kept so you can see your recent questions and so we can maintain quality. Voice input is converted to text by your own browser or device.
- Communications: emails and messages you send us.
3. Why we process it
To provide the Service you or your business asked for; to authenticate users and keep accounts secure; to send service emails such as invitations, password resets, alerts and notices; to provide support; to detect, prevent and investigate misuse; to meet legal obligations; and to improve the Service using aggregated or de-identified information. We process personal data on the basis of consent, or for legitimate uses permitted by section 7 of the DPDP Act, and, for Customer Data, on the customer's instructions.
4. Who we share it with
We do not sell personal data. We share it only with: (a) service providers that process it on our behalf under contract, namely cloud hosting (Microsoft Azure, India region), email delivery (Azure Communication Services) and, for Ask SakhaSync only, an artificial-intelligence model provider which receives the question and the figures needed to answer it; (b) people your business authorises in the Service, including any chartered accountant or partner firm it grants access to; (c) authorities where required by law or to protect rights, safety or security; and (d) a successor in a merger or acquisition, subject to this Policy.
5. Where it is stored
The Service's databases and files are hosted in Microsoft Azure's Central India region. When Ask SakhaSync is used, the question and related figures are processed by the AI provider, which may be located outside India. Transfers are made in accordance with the DPDP Act and any restrictions notified by the Government of India.
6. How long we keep it
Customer Data is kept for as long as the customer's settings provide (the customer can limit history or erase a company at any time), and is deleted within 30 days after the account ends unless the law requires otherwise. Account data is kept while the account is active and for a reasonable period afterwards for security, audit and legal purposes. Back-up copies are overwritten in the ordinary course, generally within 7 days.
7. Security
We use reasonable security practices, including encryption in transit, database-level separation of each customer's data, role-based access, hashed passwords, encrypted secrets and audit logs. No system is completely secure; we cannot guarantee that data will never be accessed without authorisation. We will notify affected customers and authorities of a personal data breach as required by law.
8. Your rights
Subject to the DPDP Act, you may ask to access, correct, update or erase your account data, withdraw consent, nominate another person, and seek redressal of grievances. For personal data inside a business's books (for example, if you are a customer or supplier of a SakhaSync customer), please contact that business, which is the Data Fiduciary; we will support it as its processor.
9. Cookies and browser storage
We use one essential cookie to keep you signed in securely. The portal also saves small preferences in your browser (such as whether the side menu is open or answers are read aloud). We do not use advertising or third-party tracking cookies.
10. Children
The Service is meant for businesses and is not directed at anyone under 18. We do not knowingly process personal data of children.
11. Changes
We may update this Policy by publishing a new version here with a new effective date, and will notify material changes by email or within the Service.
12. Contact and grievance officer
Questions, requests and grievances about personal data may be sent to Intellivane Technologies using the contact details published at intellivane.com. We will respond within the time required by law. If you are not satisfied, you may approach the Data Protection Board of India once it is constituted.