1.Introduction
This Privacy Policy explains how Coreledger Technologies Services (OPC) Private Limited ("we", "us", "our") collects, uses, stores, and protects information when you use CoreLedger Billing (the "Service"). It applies to the web app, desktop app, and marketing site.
2.Information We Collect
Account information: name, email address, password (stored as a one-way hash, never in plain text), and company/organisation details you provide during registration.
Business data: the invoices, customer and vendor records, products, payments, expenses, and other business records you create using the Service ("Your Data") — this is business data you control, entered to use the Service's core functionality.
Usage data: basic technical logs (e.g. request timestamps, IP address, error logs) generated automatically as part of operating and securing the Service.
We do not currently use analytics or advertising tracking (e.g. Google Analytics, Meta Pixel) on our website or app.
3.How We Use Information
- To provide, operate, and maintain the Service, including generating invoices, GST filings, and reports you request;
- To authenticate your account and keep it secure, including password reset and email verification;
- To communicate with you about your account, service updates, or support requests;
- To improve the Service and diagnose technical issues;
- To comply with legal obligations.
4.Where Your Data Is Stored & Who Processes It
We use the following third-party infrastructure providers to operate the Service. None of these providers are permitted to use Your Data for their own purposes — they process it solely to provide their respective service to us.
| Provider | Purpose |
|---|---|
| Google Cloud Platform / Firebase | Application hosting, database, and file storage |
| Zoho Mail | Business email (support inbox) |
| Resend | Transactional emails (password reset, email verification) |
We do not sell Your Data or account information to any third party, for any purpose.
5.Data Security
Passwords are hashed and never stored in plain text. Data is transmitted over encrypted (HTTPS) connections. Access to production systems is restricted. While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
6.Your Rights
Under applicable Indian data protection law (including the Digital Personal Data Protection Act, 2023), you have the right to:
- Access the personal data we hold about you;
- Correct inaccurate or incomplete data;
- Request deletion of your account and associated personal data, subject to any legal retention requirements (e.g. financial records required under GST law);
- Withdraw consent for optional processing, where applicable.
To exercise any of these rights, contact us using the details in Section 10.
7.Data Retention
We retain account and business data for as long as your account is active. If you request account deletion, we will delete or anonymise your personal data within a reasonable period, except where we are required to retain records for legal, tax, or regulatory purposes (for example, GST-related records may be subject to statutory retention periods under Indian law).
8.Children's Privacy
The Service is intended for business use by adults and is not directed at children. We do not knowingly collect personal data from individuals under 18.
9.Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice. The "Last updated" date at the top of this page reflects the most recent revision.
10.Contact & Grievance Officer
For questions about this Privacy Policy, or to exercise your data rights or raise a grievance under applicable Indian law, contact:
Grievance Officer: Ankush
Email: support@coreledger.in
Registered office: [REGISTERED OFFICE ADDRESS — TO BE FILLED IN]