Privacy Policy

1. OVERVIEW

ONEBI SOFTWARE LLP ("Accosync," "we," "us," or "our") respects your privacy and is committed to protecting your personal data and accounting information. This Privacy Policy explains how we collect, process, use, store, and safeguard your data when you use the Accosync platform, mobile apps (Android and iOS), desktop sync connector, and website (`https://www.accosync.com`).

By accessing or using Accosync, you consent to the practices described in this Privacy Policy.

2. INFORMATION WE COLLECT

We collect information necessary to provide seamless Tally sync and mobile access:

2.1 Personal & Account Information

• Name, email address, mobile phone number, business/firm name, and state/city.
• Account credentials and authentication tokens for desktop connector and mobile app login.
• Billing details and payment transaction references processed through secure payment gateways.

2.2 Tally Synchronized Data

• Accounting records, ledgers, vouchers, outstanding reports, and inventory items synced from your Tally ERP 9 or Tally Prime instance.
• Data is synced securely via encrypted desktop-to-cloud connections to render reports on your mobile app.

2.3 Device & Technical Logs

• Device model, OS version, IP address, app version, sync timestamps, and error logs for diagnostic and security purposes.

3. HOW WE USE YOUR INFORMATION

We use your data solely for legitimate business purposes:

• To operate, maintain, and provide live Tally mobile access and analytics.
• To authenticate your desktop sync connector and mobile app devices.
• To process subscription billing and invoice generation.
• To send essential transactional notifications (sync status, trial expiration, security alerts).
• To provide technical support and troubleshoot sync errors.

4. SECURITY & DATA STORAGE

Security is central to our architecture. We employ bank-grade security measures to safeguard your financial data:

• Encryption in Transit: All data transmitted between Tally, cloud servers, and mobile apps is encrypted using standard TLS 1.3 / SSL encryption.
• Encryption at Rest: Database records and backups are stored using AES-256 bit encryption on secure cloud infrastructure hosted in ISO/IEC 27001 certified data centers.
• Role-Based Access: Access to infrastructure is strictly restricted to authorized engineers on a need-to-know basis.

5. DATA RETENTION & DELETION

• Active Accounts: We retain your synced data as long as your subscription or trial remains active.
• 30-Day Grace Period: Following trial expiration or subscription cancellation (per our Cancellation Policy), your data is retained in a suspended state for 30 days to allow easy re-subscription without data loss.
• Permanent Deletion: After 30 days of inactivity following cancellation, customer Tally sync data is permanently purged from active production servers.
• Statutory Billing Records: Invoices and tax transaction records are retained for 8 years as required under Indian tax laws.

6. THIRD-PARTY SERVICES & SUB-PROCESSORS

We work with trusted third-party service providers to power our platform. These providers process data strictly on our instructions:

• Payment Gateways: Razorpay (for processing UPI, Credit/Debit cards, Net Banking). We do not store credit card numbers or banking passwords on our servers.
• Cloud Infrastructure: AWS / Google Cloud Platform (for secure database and server hosting).
• Distribution Services: Google Play Store and Apple App Store (for app updates and push notifications).

7. COOKIES & TRACKING

Our website uses essential cookies and lightweight analytics to understand website performance and improve user experience. You can manage cookie preferences via your browser settings.

8. YOUR RIGHTS & COMPLIANCE

In accordance with the Digital Personal Data Protection Act (DPDP Act) of India and applicable data privacy regulations, you have the right to:

• Access a summary of personal data held about you.
• Request correction or updating of inaccurate account details.
• Request deletion of your account and personal data (subject to legal retention requirements).
• Withdraw consent for marketing communications at any time.

9. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in legal requirements or platform updates. Material changes will be communicated via email or in-app notification at least 15 days before taking effect.