Privacy Policy — Chitragupta

1. Information We Collect

1.1 Information You Provide

Account details (name, email, business name), transaction data (expenses, income, partner accounts), and analytics data.

1.2 Information Collected Automatically

Usage data (pages visited, features used, session duration)
Device and browser information
IP address and approximate location

1.3 Payment Information

We collect billing information necessary to process payments. Payment processing is handled by Razorpay and we do not store full payment card details.

2. How We Use Your Information

To provide and maintain the Service
To process transactions and send related communications
To improve and personalize the Service
To communicate with you about updates, security, and support
To detect and prevent fraud or abuse

3. Third-Party Services

We use the following third-party services:

Service	Purpose	Data Shared
Supabase Inc.	Database, authentication, storage	Account data, usage data
Cloudflare Inc.	CDN, DNS, DDoS protection	IP address, request metadata
Razorpay	Payment processing	Payment details (PCI-DSS compliant)

Each third-party service has its own privacy policy governing the use of your data.

4. Data Storage & Security

Data is stored on Supabase servers (Google Cloud, multi-region)
We implement encryption in transit (TLS 1.3) and at rest
Access controls and RLS policies restrict data access
Backups are performed daily with 7-day retention

5. Data Retention

We retain your data for as long as your account is active. After account deletion, data is purged within 30 days unless required for legal or compliance purposes.

6. Your Rights (GDPR)

If you are in the EEA, you have the right to:

Access your personal data
Correct inaccurate data
Delete your data ("right to be forgotten")
Restrict or object to processing
Data portability
Withdraw consent at any time

To exercise these rights: sdachary@gmail.com

7. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party analytics cookies.

8. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this policy. Material changes will be communicated via email or in-app notification.

10. Contact

Chitragupta
sdachary@gmail.com