Privacy Policy

Data we process

• Account data of firm users: name, email, phone number and role.
• Client records the firm adds: business name, contact person, phone, email, GSTIN, PAN and filing status.
• Messages and documents exchanged with clients, including WhatsApp messages, delivery status and uploaded files.
• Technical data: log records, IP address and browser information needed to run and secure the service.

How we use it

• To send the firm's reminders, filing updates, invoices and document requests to its clients.
• To receive and route replies and documents from clients back to the firm.
• To show the firm its compliance calendar, documents and fee status.
• To keep the service secure, prevent abuse and meet legal obligations.

We do not sell personal data and we do not use client messages for advertising.

WhatsApp

WhatsApp messaging is provided through the WhatsApp Business Platform (Cloud API) operated by Meta Platforms. Message content and phone numbers are transmitted to and processed by Meta to deliver messages, under WhatsApp's Business Terms and policies. A firm only messages clients who have agreed to receive WhatsApp messages from it, and any client can stop messages by replying STOP or asking the firm.

Roles under the DPDP Act, 2023

For client data, the CA firm is the Data Fiduciary and SoftSync Lab processes that data on the firm's instructions as a Data Processor. For firm user accounts, SoftSync Lab is the Data Fiduciary.

Live demo visitors

To open the live demo at ca.softsyncsolutions.in you give us your name, firm, mobile number, email and (optionally) city, and confirm your email with a one-time code. We record when and how often you sign in. We use these details only to follow up with you about RoSync for CA, never sell them, and delete them on request - write to contact@softsyncsolutions.in. The demo itself contains only sample data.

Sharing

• Meta Platforms, to deliver WhatsApp messages.
• Hosting, database and email providers that run the service for us, under confidentiality obligations.
• Authorities, where required by law.

Requests from public authorities

We disclose personal data to government or law-enforcement authorities only when legally required. Every request is reviewed for legal validity before we act on it, and we challenge requests we consider unlawful. We disclose only the minimum data the request requires, and we keep a record of each request, our response and the legal basis for it.

Retention and security

We keep data while the firm's account is active and delete it within 90 days of account closure, unless the law requires longer retention. Data is encrypted in transit and at rest, and access is limited to authorised staff.

Your rights

You can ask to access, correct or erase your personal data, withdraw consent, or nominate a person to act for you. Clients of a CA firm should usually contact the firm first; you can also write to us. See Data Deletion for how to request deletion.

Contact and grievances

Grievance Officer: Rohith P M
Email: contact@softsyncsolutions.in
Address: 3rd, 22nd & 23rd Cross Road, Sri Nandi Garments, T. Dasarahalli, Bengaluru, Karnataka 560057, India

We respond to grievances within 30 days.