Privacy Policy

This policy explains how Asset Register 360 collects and processes personal data, consistent with the Digital Personal Data Protection Act, 2023.

1. What we collect

Account details (name, email), organisation details, and the asset/financial data you enter or upload. We log authentication events for security.

2. How we use it

To provide the Service, process payments, send service communications, and meet legal obligations. We do not sell your data.

3. Storage & security

The hosting region, backup policy and subprocessors depend on the deployment selected for your account and are documented in the applicable order or service agreement. The application applies organisation-scoped access controls; documents are stored privately and retrieved through signed, time-limited access.

4. Sub-processors

We use infrastructure, authentication, email and payment providers strictly to operate the Service.

5. Your rights

You may access, correct, or request deletion of your personal data from Settings → Privacy or by emailing taxoneadvisory@gmail.com. Deletion of a live register is assessed against statutory retention (Companies Act / GST / tax audit). Account identifiers are revoked; FAR/GST/audit records that law requires us to keep are retained. This service is not directed at children. Essential cookies are used for sign-in and organisation context. Hosting is intended for Mumbai (Vercel bom1); confirm the live database region with your account owner before relying on a residency requirement.