Privacy Policy

1. Introduction

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access our services.

2. Information We Collect

We collect the following categories of information depending on how you use CAwise:

Account and Firm Details

When you register, we collect your name, email address, phone number, address, and password (stored securely). If you choose to sign in using a third-party provider, we receive basic profile information from that provider. For your firm, we collect the firm name, contact details, address, tax registration details (GSTIN, PAN), logo, and banking information used for billing and invoicing.

Client Profiles

For each client you manage on the platform, you may record personal details (such as date of birth), tax identifiers (such as PAN, Aadhaar, and GSTIN), and business registration details. All client profile data is encrypted at rest.

Documents and Financial Records

We store documents you upload along with associated financial records, including ITR filings, GST returns, TDS/TCS data, fees, expenses, and payroll information.

Activity and Security Logs

We maintain logs of account activity (including IP address, browser and device information, and actions taken) and security events to protect the integrity and security of your account.

AI Usage Data

When you use AI features, we log which feature was used and usage metrics for that request. Prompts and responses are not retained in usage logs. Conversation history within AI features is stored to support session continuity.

3. Cookies and Session Management

CAwise uses a single session cookie to keep you logged in, secured using standard web security practices. We do not use third-party analytics, advertising cookies, or tracking pixels of any kind.

4. How We Use Your Information

We use the information we collect to:

• Provide and improve our services
• Process your transactions
• Send you administrative information
• Respond to your inquiries and support requests
• Comply with legal obligations

5. Information Sharing

We do not sell your personal data. We share information only with third-party service providers who help us operate the platform, each engaged solely for the purpose listed:

• Payment processor — Payment processing and subscription management (India)
• Cloud storage providers — Document and file storage (India and globally distributed)
• AI service provider — AI-powered features (USA)
• SMS and OTP delivery service — SMS and OTP delivery (India)
• Push notification service — Push notifications (global)
• Email delivery service — Transactional email delivery (USA)
• Authentication provider — Third-party sign-in (USA)
• Bot protection service — Bot and spam protection (global)

Some of these providers are located outside India and may process your data internationally. We work only with providers who maintain appropriate data protection standards.

6. Google Drive Integration (Optional)

CAwise allows your firm to optionally connect your own Google Drive as your document storage provider, instead of using CAwise-managed storage. This integration is entirely opt-in — your documents are only stored in Google Drive if an administrator on your firm's account explicitly connects it.

What we request: When you connect Google Drive, we ask for your Google Account email address (to identify the connected account) and the following Google API scope: https://www.googleapis.com/auth/drive.file — this scope only allows CAwise to see, create, edit, and delete files and folders that CAwise itself creates in your Google Drive. It does not grant access to any other files, folders, or content already in your Drive.

How we use it: If connected, documents you upload through CAwise are stored in a dedicated folder CAwise creates in your Google Drive, in place of CAwise-managed storage. We do not scan, read, or otherwise access the content of your Drive outside that folder.

Storage and retention: Your Google access and refresh tokens are encrypted at rest and used solely to maintain your Drive connection. If you disconnect Google Drive or delete your account, we delete the stored tokens; files already created in your Drive remain yours and are not deleted by us unless you request it.

Revoking access: You can disconnect Google Drive at any time from your CAwise storage settings, which immediately stops CAwise from accessing your Drive. You can also revoke access directly from your Google Account at myaccount.google.com/permissions.

Compliance: CAwise's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention and Account Deletion

We retain your firm's data for as long as your account remains active on CAwise.

To request account closure and deletion of your data, contact us at contact@cawise.in. We will confirm the deletion by email once it has been processed.

Please note that billing records, subscription history, and transaction data are retained for a period required by applicable accounting and tax obligations, even after an account is closed.

9. Your Rights

You have the following rights regarding your personal data:

To exercise any of these rights, contact us at contact@cawise.in.

10. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "last modified" date at the bottom of this policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us through our website or email us at contact@cawise.in.