Privacy Policy

Easy Books ("Easy Books", "we", "us") provides online billing and accounting software for businesses in India through the website easybooks.tazq.io, the web app and the Easy Books phone apps (together, the "Service").

For the personal data of your own customers, vendors and staff that you record in your books, you decide what is recorded and why: you are the data fiduciary and we process that data on your behalf. For the details of the people who sign up and use Easy Books, we are the data fiduciary.

This policy is written to meet the Information Technology Act, 2000 and its rules, and the Digital Personal Data Protection Act, 2023.

Account details: your name, email address and password. Passwords are stored only as one-way hashes; we cannot read them. If you turn on two-step sign-in, we keep the secret your authenticator uses, encrypted.

Business data you enter: organisation details (legal name, address, GSTIN, PAN, logo, bank details for printing), customers, vendors, items, documents, payments, bank statements you import, expenses, receipts and files you attach, and everything else you record in your books.

Usage and security records: sign-in sessions, the device and app version used, an activity log of changes made in each organisation, and technical logs needed to run and protect the Service. Request logs leave out passwords and sign-in tokens.

Phone app: if you allow it, the camera (to photograph receipts), the fingerprint or face lock of your phone (checked by the phone itself; we never receive it) and a push notification token.

We do not collect your location, contacts list or browsing history, and we do not use advertising or tracking cookies.

• To provide the Service: keep your books, produce documents and reports, and let the people you invite work in them.
• To secure the Service: sign you in, detect misuse, limit repeated sign-in attempts and keep an audit trail.
• To review new accounts and set up your plan, and to give support when you ask for it.
• To send you messages about your account and your organisation, such as notifications you have turned on.
• To meet legal obligations, such as keeping books of account and answering lawful requests.

We use your business data only to provide the Service to you. We do not sell it, rent it or use it to advertise to you or anyone else.

We use only cookies that the Service needs to work: two sign-in cookies that keep you signed in, set as httpOnly and SameSite=Strict so other sites cannot use them. Your browser also stores your display choices (theme, scene, the 3D switch and the selected financial year) on your device. None of these are used for tracking or advertising.

Your data is stored on our server in Mumbai, India, and encrypted while it travels between your device and the server. Each organisation’s records are kept apart from every other organisation by the database itself.

Encrypted backups are made every day and kept for a limited period so the Service can be restored after a failure.

• People you invite to an organisation, within the role and limits you give them.
• People you share a document with through a share link.
• Easy Books staff, only as far as needed to run the Service, review new accounts and keep it secure. Staff look inside an organisation’s books only when an owner grants support access, which ends on its own and is recorded in the activity log.
• Service providers that help us run the Service, such as our hosting provider and, when enabled, email delivery and push notification services. They may process data only on our instructions.
• The AI assistant works on our own server by default. An outside AI provider is used only if an owner turns that on for the organisation.
• Authorities, when the law requires us to disclose information.

While your organisation is open, your books are kept unchanged. If an owner closes the organisation, a final export is offered for 30 days, during which it can be reopened. After that the books are kept for eight years from closing, because Indian law requires books of account to be preserved, and are not used for anything else.

Operational records are removed on a schedule: for example, expired sign-in sessions after 30 days and read notifications after 180 days.

You can see and correct your account details in the app, download your organisation’s data (reports, and full exports on plans that include them), and close an organisation. You can ask us for a summary of the personal data we hold about you, to correct or erase it, or to nominate someone to act for you, and you can withdraw consent you have given, subject to the records we must keep by law.

If you are a customer or vendor of a business that uses Easy Books, please contact that business first: it decides what is recorded about you. We will help it respond.

The Service is meant for businesses and is not offered to anyone under 18 years of age.

If we change this policy, we will publish the new version here with a new effective date, and tell account owners in the app before important changes take effect.

For questions or complaints about privacy, or to use your rights, write to us through Settings > Support inside the app, or through the contact details on our Support page (easybooks.tazq.io/support). We will acknowledge a grievance within 24 hours and aim to resolve it within 15 days. If you are not satisfied, you may approach the Data Protection Board of India.