Your ledger is never someone else's training set.

Built-in consent tracking, purpose limitation, role-scoped PII masking and one-click right-to-erasure across the Indian Digital Personal Data Protection Act, 2023, the IT (SPDI) Rules, 2011 and EU GDPR requirements.

Grounded RAG and MCP queries execute strictly against your isolated tenant or local ledger. Customer records, margins and SKU data are never shared with or used to train public AI models.

On Sovereign and air-gapped installs, zero telemetry or licence pings leave your perimeter. Payment card data is tokenised at the terminal under PCI-DSS controls.

We collect account and billing details required to provision and invoice your tenant (name, work email, phone, company, GSTIN and security audit logs). Card, UPI and banking credentials are processed directly by RBI-compliant, PCI-DSS certified payment gateways with 3-D Secure OTP — raw payment instrument details are never stored on our servers.

We use strictly functional cookies for session authentication, CSRF protection and traffic diagnostics. We never sell, rent or trade personal or operational data to advertisers or data brokers; disclosure occurs only to bound infrastructure sub-processors or TolsTek Group / Jiggle De Venture group companies processing on our documented instructions under confidentiality agreements, or when compelled by lawful court or government order. External sites we link to carry their own privacy practices — this policy covers ours only.

Operational data is retained for the life of your active account plus statutory tax-retention windows; upon termination you receive a full export followed by cryptographic erasure within 30 days. This policy constitutes an electronic record under the Information Technology Act, 2000 and requires no physical or digital signature.