Privacy Policy
1. Overview & Data Fiduciary Identity
This Privacy Policy explains how Cashio ("Data Fiduciary", "we", "us") collects, processes, stores, and protects personal data of users ("Data Principals") in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
2. Notice of Personal Data Collected (Section 5, DPDP Act)
We collect and process the following categories of personal data solely for specific, legitimate business purposes:
| Data Category | Specific Elements | Purpose of Processing |
|---|---|---|
| User Identity | Full Name, Email Address, 10-digit Indian Mobile Phone (+91) | Authentication, account creation, multi-tenant organization access, and security notifications. |
| Organization & Ledger Data | Business Name, Contact Phone/Email, Cashbook Entries, Bills, Line Items, Customer Names & Phones | Delivering core cash register, financial ledger, receipt generation, and tax calculation services. |
| Integration Credentials | Encrypted Razorpay / PhonePe keys, Meta WhatsApp access tokens | Facilitating merchant-initiated UPI collection links and customer WhatsApp bill reminders. Encrypted via AES-256-GCM. |
| Technical & Audit Logs | IP Address, Browser User-Agent, Session Identifiers, Immutable Audit Events | Brute-force defense, rate limiting, session security, and statutory tamper-evident audit logging. |
3. Consent Architecture & Legal Basis (Section 6, DPDP Act)
Your personal data is processed on the basis of your free, specific, informed, unconditional, and unambiguous consent signified by an affirmative action (such as checking the consent box during registration or confirming onboarding). We record the policy version, timestamp, user ID, IP address, and User-Agent in an auditable consent log.
You have the right to withdraw consent at any time by contacting our Grievance Officer or initiating an account closure. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
4. Rights of Data Principals (Sections 11–13, DPDP Act)
Under the DPDP Act 2023, you have the following enforceable rights:
- Right to Access Information: Obtain a summary of personal data processed and processing activities.
- Right to Correction & Updating: Correct inaccurate or incomplete personal data via your profile or organization settings.
- Right to Erasure (Data Deletion): Request the permanent deletion of your personal data when it is no longer necessary for the purpose it was collected.
- Right to Support & Redressal: Reach out to our Customer Support desk for assistance with your account, data rights, or product queries, acknowledged within 24 hours.
- Right to Nominate: Nominate an individual to exercise your data rights in the event of death or incapacity.
5. Data Security Safeguards (Reasonable Security Practices)
Cashio enforces enterprise-grade security controls to safeguard data integrity and confidentiality:
- Password Protection: One-way cryptographic hashing using bcrypt with high work factor; passwords are never stored in plaintext.
- Credential Encryption: Third-party API secrets, webhook passwords, and tokens are sealed at rest with authenticated AES-256-GCM encryption.
- Strict Content Security Policy (CSP): Zero inline scripts, zero inline styles, and zero external tracking CDNs to eliminate cross-site scripting (XSS).
- Transport Security: All web traffic is strictly encrypted in transit using TLS 1.3 / HTTPS.
- Immutable Audit Logging: Security and mutation events are stored in append-only database audit tables with restricted administrative access.
6. Data Sharing & Third-Party Disclosures
Cashio strictly does not sell, rent, or trade your personal data. Data is only shared with third parties under the following limited conditions:
- Merchant-Configured Integrations: When you choose to enable Razorpay, PhonePe, or WhatsApp, data necessary to generate payment links or bill receipts is communicated directly to your configured provider.
- Single Sign-On (Google OIDC): When signing in with Google, verified identity tokens are exchanged strictly to confirm identity.
- Statutory & Law Enforcement Compliance: When required by a valid order of a court or regulatory authority in India under applicable law.
7. Data Retention & Cross-Border Transfers
All personal and financial data is stored and processed on servers located within the territory of India in accordance with applicable government directions. For details on account purge cycles and merchant retention responsibilities, please review our Data Retention Policy.