Privacy Policy

CADesk ("we") is provided to Chartered Accountant firms. This policy explains what personal data we handle, why, and your rights under the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

We handle personal data in two different roles:

• For our own purposes — website visitors, people who ask for a demo, and the people at our customer firms who use the software (their names, emails, sign-ins and billing). For this data we decide how it is used.
• For CA firms — the data a firm keeps about its own clients (names, PAN, income, documents and so on). The firm decides how that data is used; we only process it on the firm’s instructions, under our Data Processing Agreement.

If you are a client of a CA firm that uses the software, your firm is responsible for your data. Please contact your firm about it; we will help the firm answer you.

• Account details: name, email, phone, role, firm name and address, and the firm’s PAN and GSTIN if given.
• Demo requests: name, firm, email, phone, city and your message.
• Sign-in and security records: when and from where (IP address, browser) people sign in, and an audit trail of actions in the software.
• Billing: plans, invoices and payment status. Card, UPI and bank details are entered on Razorpay’s pages; we do not see or store them.
• Messages you send us for support.

We do not collect more than we need, and we do not buy personal data from others.

• To provide the software, keep accounts secure (for example, emailed sign-in codes) and prevent misuse.
• To bill firms, issue GST invoices and keep the accounting records the law requires.
• To send service messages: sign-in codes, invitations, reminders about plans ending, and important changes.
• To reply to demo requests and support questions.
• To improve the software, using usage information that does not identify clients of firms.

We rely on your consent (for example, when you ask for a demo), on what is needed to provide the service you signed up for, and on legal duties such as tax records. You can withdraw consent at any time; this does not affect what was done before.

We use only cookies that are needed for signing in and keeping you signed in securely. We do not use advertising or tracking cookies, and we do not show ads.

Personal data is stored on servers in India (Google Cloud Platform, Mumbai). If that ever changes, we will move data only as the law allows and will update this policy first.

• Firm accounts: while the firm uses the software; after it closes, 90 days to download, then deletion within 30 days. Backups are overwritten within 30 days after that.
• Invoices and payment records: as long as tax law requires (generally 8 years).
• Demo requests: up to 2 years, unless you ask us to delete them sooner.
• Security records: as long as needed to keep the service secure and meet legal duties.

Each firm’s data is kept apart from every other firm’s; connections are encrypted (HTTPS); passwords are stored only as one-way hashes; saved portal passwords are encrypted; partners and admins confirm sign-ins with emailed codes; every important action is recorded; and backups are taken nightly. See our Security page for more. If a breach affects your data, we will inform you and the Data Protection Board of India as the law requires.

You can ask us to:

• tell you what personal data we hold about you and how it is used;
• correct, complete or update it;
• delete it, where we no longer need it or are not required by law to keep it;
• deal with a grievance about how your data is handled;
• let someone you nominate act for you if you die or are unable to act.

Write to our Grievance Officer at info@cadesk.si. We will reply within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

CADesk is for professional firms and is not meant for anyone under 18. A CA firm that keeps data about a client who is a child is responsible for getting a parent’s or guardian’s consent where the law requires it.

If we change this policy in an important way, we will tell firm admins by email or in the app before the change takes effect. The date at the top shows the latest version.

Grievance Officer, CADesk, info@cadesk.si.

CADesk, St. Marks Road, Bengaluru 560001. Email: info@cadesk.si.