Privacy Policy

CAZen ("CAZen", "we", "us", or "our") provides a compliance workflow platform that helps Chartered Accountant ("CA") firms in India automate document collection, client reminders, and compliance tracking (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have, when you use our website and Service.

If you are a client of a CA firm that uses CAZen, please also refer to section 4 below — in most cases, the CA firm, not CAZen, is responsible for how your personal data is collected and used.

1. Information We Collect

1.1 Account & firm information

When a CA firm signs up, we collect information such as the firm's name, contact details, team member names and email addresses, billing details, and login credentials (or details from a third-party sign-in provider such as Google).

1.2 Client & compliance data

To deliver the Service, CAZen processes data that CA firms upload or connect on behalf of their own clients, including client names and contact details, documents required for compliance filings, due dates, reminder logs, and communication history.

1.3 Data from connected integrations

With the firm's authorization, CAZen may connect to third-party services to automate workflows, including:

• Google Workspace (Gmail, Google Drive, Google Calendar): to send/receive emails, store or retrieve documents, and sync reminders or appointments.
• WhatsApp Business: to send reminders and receive documents shared by clients over WhatsApp.

We only request the level of access needed to provide the features the firm has enabled, and access can be revoked by the firm at any time from Settings or the relevant third-party account.

1.4 Usage & device data

We automatically collect limited technical information — such as browser type, device type, IP address, pages visited, and approximate usage patterns — through tools such as Firebase Analytics, to help us understand and improve the Service.

2. How We Use Information

• To provide, operate, and maintain the Service;
• To send compliance reminders, notifications, and document requests on behalf of a firm to its clients;
• To process payments and manage subscriptions;
• To provide customer support and respond to inquiries;
• To monitor usage, diagnose technical issues, and improve product performance and reliability;
• To detect, prevent, and address fraud, abuse, or security issues; and
• To comply with applicable legal obligations.

We do not sell personal data to third parties.

3. How We Share Information

We may share information with:

• Service providers who help us operate CAZen (e.g., cloud hosting, analytics, and communication providers), bound by confidentiality and data protection obligations;
• Third-party platforms a firm chooses to connect (e.g., Google, WhatsApp/Meta), subject to that platform's own terms and privacy practices;
• Legal or regulatory authorities, where required by law, court order, or to protect the rights, safety, or property of CAZen, our users, or others; and
• A successor entity, in the event of a merger, acquisition, or sale of assets, with notice to affected users where required.

4. CA Firms as Data Controllers

CA firms using CAZen act as the data controller for the personal data of their own clients — they determine what client data is collected, uploaded, or connected through the Service. CAZen acts as a data processor/service provider, processing that data only on the firm's instructions and for the purpose of providing the Service. Firms are responsible for obtaining any consents from their clients that are required by applicable law before uploading or connecting client data to CAZen.

5. Data Storage & Security

We use industry-standard technical and organizational measures — including encryption in transit, access controls, and secure cloud infrastructure — to protect data against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain account and client data for as long as a firm's account is active, and for a reasonable period afterward to comply with legal, tax, or audit obligations, resolve disputes, and enforce our agreements. Firms may request deletion of their account data as described in section 7.

7. Your Rights & Choices

Subject to applicable law, including the Digital Personal Data Protection Act, 2023 and rules made thereunder, you may have the right to access, correct, update, or request deletion of your personal data, and to withdraw consent for optional processing (such as marketing communications). CA firm clients should direct such requests to the relevant firm in the first instance; CAZen will assist firms in responding to verified requests. Firm administrators can reach us directly using the contact details in section 12.

8. Cookies & Similar Technologies

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. You can control cookies through your browser settings; disabling them may affect some functionality.

9. Children's Privacy

The Service is intended for use by professionals and businesses and is not directed to individuals under the age of 18. We do not knowingly collect personal data from children.

10. International Data Transfers

We primarily store and process data using cloud infrastructure providers that may operate data centers in India and other countries. Where data is transferred internationally, we take steps to ensure it remains protected consistent with this Policy and applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via the Service or by email, and the "Last updated" date above will reflect the most recent revision. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact our Grievance Officer at:

[Company Legal Name]
Attn: Grievance Officer
[Registered Address]
Email: privacy@cazen.app