Privacy policy
Last updated: 23 October 2026
In short: the files you check (purchase registers, GSTR-2B, bank statements) never leave your computer. We keep only what is needed to sell passes, give support and keep the website secure, and most of it is deleted after 180 days.
1. Who is responsible
ReconAudit AI is the “Data Fiduciary” for the personal data described here, under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”). Contact: the “Help & feedback” button on the website.
2. Your files
Purchase registers, GSTR-2B files and bank statements are opened and checked inside your own browser. They are not uploaded to us or anyone else, and they are cleared when you close the tab. Excel reports are created on your computer.
3. What we collect and why
| What | Why | How long |
|---|---|---|
| Order details: name, e-mail or phone, plan, amount, UPI reference (UTR) | To confirm your payment, issue your pass and keep accounts | As long as tax and accounting law requires (generally up to 8 years) |
| Pass details: unlock code ID, plan, expiry, and the name/e-mail/phone you gave us | To activate Pro, extend or cancel a pass and handle support | As above |
| Messages you send through “Help & feedback”, and your contact details if you ask for a reply | To answer you and improve the Service | 180 days |
| Crash reports (technical error only; numbers, quoted text and identifiers removed) | To fix problems | 180 days |
| Activity and security records: code activation, payment confirmations, invalid codes, with a scrambled code instead of your IP address, plus country and browser type | To keep the Service secure and meet record-keeping rules | 180 days |
We do not use advertising or tracking cookies and we do not sell personal data.
4. Optional AI check (Pro)
If you switch on the optional AI check, short expense descriptions are sent through our server to an AI provider (Google) to suggest categories. GSTINs, PANs, account numbers and amounts are removed first. It is off unless you switch it on.
5. Who else processes data
- Cloudflare — hosts the website and our small database.
- Payment providers (for example Razorpay, Cashfree or Dodo Payments) and your bank or UPI app — they handle your payment. We never see card numbers, UPI PINs or bank passwords.
- Google — only for the optional AI check above.
6. Stored in your browser
Your browser keeps your unlock code, an unfinished order and your settings (such as whether crash reports are on) so you do not have to enter them again. You can remove them by clearing this site’s data in your browser.
7. Your rights
Under the DPDP Act you can ask to see a summary of the personal data we hold about you, correct it, or have it erased, and you can withdraw consent you gave (for example for a reply to feedback). Write to the “Help & feedback” button on the website from the e-mail or phone you used. Order and payment records are kept for tax law, but we remove your name and contact details on request.
We aim to respond within 7 days. If you are not satisfied with our reply, you can complain to the Data Protection Board of India.
8. Security
The website uses HTTPS, strict browser security rules and signed unlock codes. Access to our records is limited to the owner and protected with a password and a second sign-in step.
9. Children
The Service is meant for businesses and professionals and is not intended for anyone under 18.
10. Changes
We will update this page if anything changes. The date at the top shows the latest version.