1. Who this covers
This policy explains how TruNxt Tech Private Limited ("TruNxt", "we", "us") handles personal data when you visit this website, contact us, or use Transure or Transure CA (the "services"). It is written to meet the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.
Where a business or a CA practice uses the services to process information about its own customers, staff or clients, that organisation decides why and how the data is used and we process it on their instructions. This policy covers what we do; the organisation's own policy covers what they do.
2. What we collect
Information you give us. Your name, work email, phone number, company or practice name, and anything you write to us through the contact form or by email. When you create an account: login details, role, and billing details. Card and bank details used to pay us are collected by our payment provider and we see only what we need to confirm the payment.
Information in your books. The financial records you or your accountant enter or import into the services, such as invoices, bills, bank transactions, ledgers, GST and TDS details, and the names and contact details of your customers, suppliers and employees that appear in those records.
Information from connected services. When you connect a bank feed, payment gateway, government portal or online marketplace such as Amazon, we receive the transaction and status data needed to provide that feature, along with access tokens that let the connection work.
Information collected automatically. Device and browser type, IP address, pages visited, actions taken in the services, and timestamps. We collect this to keep the services working, to secure them and to understand how they are used.
3. How we use it
- To provide the services: keep your ledger, reconcile transactions, show your accountant what you have authorised them to see, and bill you.
- To run and improve the services: fix bugs, prevent abuse, measure what features are used, and plan new ones.
- To communicate with you: reply to enquiries, send service notices such as security alerts and changes to terms, and, if you have not opted out, tell you about product updates.
- To meet our legal obligations, including tax, accounting and record-keeping rules, and to respond to lawful requests from authorities.
We do not sell personal data, and we do not use your books to advertise to you or to anyone else.
4. AI features
Features such as bill capture, bank-feed matching and anomaly flags use machine learning. They run on your own account's data to produce suggestions for your account. Where we use third-party AI providers to process a document or a query, we send only what is needed for that request, under contracts that prohibit the provider from using your data to train their own models. We do not use one customer's financial data to build features for another customer without first removing anything that could identify a person or business.
6. Bank and third-party connections
When you connect a third-party service we store the access token or credentials it issues so that the connection keeps working. Tokens are encrypted at rest. When you disconnect the service, or when your account is closed, we delete the token. Transaction data already imported into your ledger stays in your books until you delete it.
7. Amazon seller data
If you connect your Amazon seller account, we receive order, settlement and payout data, and we use it only to provide the services to you. We do not store buyer names, addresses or contact details. When you disconnect, we delete your access token and stop syncing. Data already imported stays in your Transure account until you delete it, and is handled under "How long we keep it". You can ask us to delete it by writing to hello@trunxt.tech.
9. How long we keep it
We keep account and contact information while you have an account and for as long as needed afterwards to settle billing, resolve disputes and meet legal obligations. Financial records in your books are kept while your subscription is active, and for 30 days after it ends so that you can export them. After that we delete or anonymise them, except where Indian tax, company or other law requires us to retain records for longer, in which case we keep only what that law requires and for only that period.
Contact-form enquiries are kept for up to two years. Server logs are kept for up to 12 months.
10. Security
We protect data with encryption in transit and at rest, role-based access controls, a full audit trail of changes to your books, regular backups and monitoring. Access by our staff is limited to what is needed to support you and is logged. No system is perfectly secure, so if we learn of a breach that affects your personal data we will notify you and the Data Protection Board of India as the law requires.
11. Your rights and choices
Under Indian law you have the right to know what personal data we hold about you, to have it corrected or updated, to have it erased where we no longer need it, to withdraw consent where processing is based on consent, and to nominate someone to exercise these rights on your behalf. You can do most of this from your account settings. For anything else, write to us at the address in section 15 and we will respond within 30 days.
You can unsubscribe from product and marketing emails using the link in any such email or by writing to us. We will still send service notices that are needed to run your account.
If you are a customer, supplier or employee of one of our users and your details appear in their books, please contact that organisation first. We will help them respond.
12. Children
The services are for businesses and professionals and are not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
13. Where data is stored
Your data is stored on servers located in India. Some service providers, such as email delivery or AI processing, may process data outside India. Where they do, we use contracts that require them to protect the data to the standard this policy describes and only to the extent Indian law permits such transfers.
14. Changes to this policy
We may update this policy from time to time. The current version is always at this address with its "last updated" date. If a change materially affects how we use your personal data, we will notify account holders by email before it takes effect.
15. Contact and grievances
Questions about this policy, requests to exercise your rights, or complaints can be sent to our Grievance Officer:
Grievance Officer
TruNxt Tech Private Limited
3rd & 4th Floor, Plot 20, HUDA Techno Enclave, Shaikpet, Madhapur, Hyderabad, Telangana 500081
hello@trunxt.tech
We acknowledge grievances within 72 hours and aim to resolve them within 30 days. If you are not satisfied with our response you may approach the Data Protection Board of India.