DPDP Act (India) & GDPR Compliant

Privacy Policy

Last updated: October 2026 • Strict Zero-Retention Guarantee

Our Privacy Moat: Zero Document Retention

Financial statements contain sensitive client records, account numbers, and cash flow data. BalanceTie was engineered from day one to operate with zero persistent document retention:

In-Memory OCRPDFs are processed ephemerally in RAM and purged upon export.

1-Hour Auto-PurgeAny temporary workspace cache is irreversibly wiped within 60 minutes.

No Model TrainingYour financial data is never used to train or fine-tune public AI models.

1. Information We Collect

Account Information: Business email address and hashed passwords when creating a CA workspace account.
Billing Data: GSTIN and transaction IDs processed securely via our PCI-DSS Level 1 compliant Merchant of Record partners. We do not store raw card numbers.
Technical Telemetry: Anonymized conversion duration (ms), page counts, and error diagnostic logs to maintain uptime.

2. Bank Password Security

When using our client-side password helper to unlock encrypted PDFs, password combinations are evaluated locally in your browser session or ephemeral sandbox. Passwords are never logged, stored in persistent databases, or transmitted to third parties.

3. Data Subject Rights & Deletion Requests

Under the Digital Personal Data Protection (DPDP) Act of India and the EU GDPR, you have the right to request full account erasure, data export, or audit logs. All requests are processed within 48 hours.

4. Privacy Officer Contact

To exercise your privacy rights or discuss enterprise data residency agreements, email our Data Protection Officer at privacy@balancetie.com.