This policy explains how Accufera collects, uses, shares and protects personal data when you use the accufera.com website, the Accufera firm app, the client portal and the Accufera mobile app for Android and iPhone (together, "Accufera"). Accufera is operated by Royal Madisson Private Limited ("we", "us").
Who decides what happens to your data
Accufera is used by Chartered Accountant firms to run their practice. When a firm adds information about its clients, staff or work, the firm decides what is collected and why. Under India's Digital Personal Data Protection Act, 2023, the firm is the data fiduciary for that information and we process it on the firm's behalf, only to provide Accufera to the firm.
We are responsible for the data we handle for our own purposes: the accounts of firm partners who sign up, enquiries you send us, support requests and the security of the service.
If you are a client of a CA firm and have a question about your records, please contact your firm first. We will help the firm answer you.
What we collect
Account details
Your name, email address, phone number (if given), your firm and your role. We use these to sign you in and to show who did what inside your firm.
Information a firm keeps in Accufera
Client names and contact details, PAN, GSTIN and other registration numbers, addresses, compliance tasks and their status, notes, digital signature certificate records, documents and photos uploaded by staff or clients, invoices and the payments the firm records against them.
Security and activity records
Sign-in times, the type of device used, IP addresses and a log of sensitive actions (for example approving a filing or changing a payment method). These protect your account and your firm's data.
Notifications
If you allow notifications in the mobile app, a push token for your device so we can tell you when work needs you. You can turn this off at any time in your phone's settings.
Emails we send
Sign-in codes, invitations, document requests, reminders, invoices and acknowledgments, with their delivery status, so the firm can see whether a message arrived.
What we do not collect
- Card, bank or UPI details. Clients pay the firm directly through the firm's own UPI ID or payment gateway; the money and the payment details never pass through Accufera.
- Advertising identifiers or tracking data. Accufera has no ads, no analytics tools and no third-party trackers, in the apps or on this website. This website does not set cookies.
How we use it
- To provide Accufera: sign-in, the compliance calendar, tasks, documents, billing and the client app.
- To send the emails and notifications described above, in the firm's name where they are sent on its behalf.
- To keep the service secure, detect misuse and investigate problems.
- To answer support requests and enquiries.
- To meet our legal obligations.
We do not sell personal data and we do not use it for advertising.
Service providers we use
We rely on a small number of providers to run Accufera. They process data only on our instructions and only to provide their service.
| Provider | What it does for Accufera |
|---|---|
| Supabase | Database, file storage and sign-in. All Accufera data is stored here, encrypted. |
| Resend | Sends Accufera's emails. It receives the recipient's address and the message. |
| Cloudflare | Hosts this website and the web apps, and protects them from attacks. |
| Expo, Apple and Google | Deliver push notifications to the mobile app. |
| The firm's payment gateway | If a firm connects its own gateway (for example Razorpay), clients pay the firm through it under the gateway's own terms. |
Some of these providers may process data outside India. Where they do, we rely on their contractual commitments to protect it to the standard this policy describes.
We may also disclose data where the law requires it, for example to comply with a valid order from a court or government authority.
How we protect it
- Data is encrypted in storage and in transit.
- Each firm's data is separated from every other firm's in the database itself.
- Two-step sign-in is required for partners and managers and on by default for everyone else.
- Sensitive actions are recorded in an audit log that cannot be edited.
- Accufera staff cannot see a firm's data unless a partner of that firm grants time-limited support access, and that access is logged.
How long we keep it
We keep a firm's data for as long as the firm uses Accufera, and afterwards for as long as the firm asks us to or the law requires. CA firms must keep many records, such as filings and invoices, for several years, so these are not erased when a single person leaves.
Security and audit records are kept for as long as needed to protect the service and meet legal obligations.
Deleting your account
You can delete your Accufera account in the mobile app under More, then Delete my account, or on the web at portal.accufera.com/delete-account. Your access ends straight away, and your login and personal profile are erased within 30 days. Records your CA firm must keep by law stay with the firm, shown under a neutral name such as "Former team member".
Your rights
Subject to the law, you can ask to access, correct or erase your personal data, withdraw consent where processing relies on it, and nominate someone to act for you. For data a firm holds about you, please ask the firm; we will support its response. For anything else, write to us at the address below. You may also complain to the Data Protection Board of India.
Children
Accufera is a business tool and is not meant for children under 18.
Changes to this policy
If we change this policy we will update the date at the top. If a change is significant, we will tell firm partners by email before it takes effect.
Contact and grievances
Questions, requests and grievances about privacy: [email protected]. We aim to reply within 7 days.