Privacy Policy

Last updated: 02 November 2026

1. Scope

This policy explains how AECVeda handles personal data in the AECVeda TMS website and app. It is written to meet India’s Digital Personal Data Protection Act, 2023 and, for users abroad, general GDPR principles.

2. Roles

For data your firm puts into the app (staff names, e-mails, mobile numbers, tasks, time logs), your firm is the Data Fiduciary / controller and AECVeda is the Data Processor. For website visitors and account holders signing up, AECVeda is the Data Fiduciary.

3. What we collect

Account data (name, e-mail, mobile, firm name, designation), workspace content, billing details (handled by our payment gateways, such as Razorpay — we never see or store full card numbers), basic technical logs (IP address, browser, timestamps) for security, and messages you type into the chat assistant (with the page you were on). Please do not type passwords or payment details into the chat.

4. Why we use it

To provide and secure the Service, process payments and issue tax invoices, send service e-mails (invites, password resets, billing), and improve the product. We send marketing e-mails only if you opt in, and you can unsubscribe at any time.

5. Sharing

Only with sub-processors who help run the Service: hosting provider, e-mail delivery, payment gateways (such as Razorpay), and Anthropic, whose Claude AI model writes the chat assistant’s answers (chat messages are sent to it only to generate a reply). Each is bound by confidentiality and security obligations. We may disclose data if the law requires it.

6. Storage and security

Data is stored on our hosting provider’s servers. Your workspace admin can tell you the region. Data is encrypted in transit (HTTPS), passwords are hashed, each firm’s data is logically separated, and we take daily backups.

7. Retention

We keep workspace data while the subscription is active and for 30 days after closure, then delete it from live systems. Backups roll off within 30 more days. We keep invoices for as long as tax law requires.

8. Your rights

You can access, correct and erase your personal data, withdraw consent and raise grievances. Staff users should first contact their firm’s admin. You can also write to our Grievance Officer at hello@aecveda.com. We respond within the time limits set by law.

9. Changes

We will post updates here and e-mail Owners about significant changes.