Privacy Policy

• Shop users: the owner and staff who sign in to FinOps. For your own sign-in details, OneBridge Infotech decides how the data is used.
• Your customers and suppliers: people whose names and numbers a shop writes into FinOps. For them, the shop decides why their data is used, and OneBridge Infotech only stores and processes it on the shop’s behalf. If you are a customer and want something changed or removed, please first ask the shop; you can also write to us.

When you sign up and sign in

• Mobile number, email address, name, and a sign-in method (OTP, or Google if you choose it). If you use Google, we receive your name, email and a Google account identifier, and nothing else from your Google account.
• An app-lock PIN, stored only as a one-way scrambled value, never as the PIN itself.
• Device and browser details, the time of sign-in and a rough network identifier, so we can show your signed-in devices and protect against misuse.

What you put into the app

• Shop details: name, address, GSTIN, UPI ID, bank details you choose to print on bills, logo and signature.
• Customers and suppliers: name, mobile number, email, address, GSTIN, credit terms, notes, and whether they agreed to receive messages.
• Money records: credit given, payments, bills, quotes, orders, items, stock, expenses, cash book and attachments such as bill photos, PDFs and voice notes.
• Bank or UPI statements you upload for “Money in & out”: dates, amounts, descriptions, names of payers and payees, and balances, read from the file.
• Photos of paper notes that you upload to be read, and the lines read from them.
• Field work, if you use it: visits, check-in times and, only if your phone allows it and you start a visit, the location where you checked in.

Created while you use the app

• A record of changes (who changed what and when), the messages queued or sent, and error and performance logs. Error logs are cleaned so that they do not keep personal details.

• To run the Service: sign you in, keep your records, make bills, work out balances, send the messages you ask for, and show reports.
• To keep things safe: stop misuse, find faults, keep a tamper-evident history, and make backups.
• To support you: answer questions and fix problems you report.
• To follow the law and protect our rights.
• To improve the Service, using counts and averages that do not identify a person.

We do not sell personal data, and we do not use it to show you third-party advertising.

We use your data because you ask us to provide the Service and have agreed to these terms, to meet legal duties (for example tax and accounting record rules), and for limited legitimate uses such as security. Where the law needs your specific consent, we ask for it, and you can withdraw it at any time; withdrawing may mean some features can no longer work.

For messages to your customers (reminders, receipts, bills), the app records whether the customer agreed. Customers can stop messages through the link in each message or by asking the shop.

Only as needed to run the Service, and always under confidentiality and security terms:

• Hosting and database providers that store and process data for us.
• Message providers for SMS, email and OTP delivery, when you use those features. WhatsApp reminders are opened on your own phone and sent through your own WhatsApp account; WhatsApp’s own privacy policy applies to that.
• An AI reading service, only when you use “Paper notes”: the photo you upload is sent to it so it can be read, and is not used by us for anything else. Please do not photograph pages that have other people’s personal details if you do not want that.
• Google, if you choose to sign in with it.
• Payment partners, if you use online payment links, so that payments can be taken and matched.
• Your shop: owners and staff see what their role allows. A customer who opens a statement link sees only their own account with that shop.
• Authorities, where the law, a court or a lawful order requires it.
• A buyer, if our business is sold or merged, on the same terms as this policy.

Some of these providers may keep data on servers outside India. When that happens we take steps to protect it as the law requires.

• While your shop is active, we keep your records so the app can work.
• If you ask us in writing to delete your shop, we close it and permanently erase its data within 30 days of confirming the request is yours, unless the law requires us to keep something longer. Backups that contain it are removed as they expire.
• Some records may have to be kept for the period tax and company laws require (for example, GST records for several years). We keep only what is needed and only for that purpose.
• Sign-in codes expire within minutes. Security and error logs are kept for a limited time.

• Connections to the Service are encrypted. Passwords are not used; sign-in uses one-time codes or Google, and PINs are stored scrambled.
• Each shop’s data is kept separate, and staff roles limit what each person can see.
• The record of changes is chained so that edits to history can be detected. Backups can be encrypted.
• Our own access to customer data is limited to what is needed for support and safety, and is logged.

No system is perfectly secure. If a personal data breach affects you, we will tell you and the authorities as the law requires.

Under the DPDP Act you can ask us to:

• tell you what personal data we hold about you and how it is used;
• correct or complete it;
• erase it, when it is no longer needed and the law does not require us to keep it;
• take up a complaint about how it is handled; and
• name someone to exercise these rights for you if you cannot.

Shop users can see and fix most of this inside the app and download everything from Excel & backup. For anything else use Contact & Grievance. We may need to check who you are first. We reply within 15 days. If you are unhappy with the answer, you can go to the Data Protection Board of India once it is in place.

The Service is for businesses and is not meant for people under 18. We do not knowingly collect data about children. If you think we have, tell us and we will remove it.

We use a small number of cookies and local storage to keep you signed in and to make the app work offline. See Cookies.

If we change this policy we will update the date above and, for important changes, tell you in the app.

OneBridge Infotech. Complaints: Contact & Grievance.