Privacy policy

Last updated: 2 October 2026

Finyaara helps businesses and their chartered accountants (CAs) check GST, ITC and cash from their TallyPrime books. This page explains, in plain words, what we collect, why, where it is kept, who can see it, and what you can ask us to do with it. Finyaara is run by the Finyaara team in India and is not yet registered as a company; we will update this page when it is.

1. What we collect

When you contact us through this website

Your name, firm or company name, mobile number, email, whether you are a CA or a business owner, your city, your message, the language you used, and which form you used. We use it only to reply to you.

When you create an account

• Your name, email and password, and a mobile number if you give one (we use it only to help you with setup). We never store the password itself, only a one-way hash of it.
• Your business or CA firm: trade name, GSTIN if you give it, your role, and the date you agreed to us processing the business's data.
• Profile details you choose to add, such as a mobile number.
• Sign-in records: a session lasts up to 30 days; we keep only a one-way hash of its token.

When FinDesk syncs your Tally books

FinDesk runs on the computer where TallyPrime is open and only reads your books. It never creates, changes or deletes anything in Tally. It sends us:

• the Tally company's name;
• purchase bills: supplier names and GSTINs, invoice numbers, dates, amounts and taxes, and purchase ledgers;
• unpaid bills (Bills Payable) and amounts due to and from customers and suppliers, with party names;
• the results of Finyaara's checks (for example a price increase or a GSTIN problem) and follow-ups you add;
• a one-way hash of the computer's identifier, so we can count how many computers use a licence. We never receive the identifier itself.

It does not send your whole Tally company, your bank logins, or your GST portal password. We never ask for those.

Feedback you give us

For example when you ask for more trial days: how useful Finyaara has been, what to improve, what would make it worth paying for, and how likely you are to recommend it. We use it only to improve Finyaara and to decide on your request.

Files you upload

GSTR-2B files and documents you add to evidence packs (for example a notice or a bank statement page).

2. Why we use it

• To run Finyaara for you: show findings, reconcile GST and ITC, track follow-ups and the monthly close.
• To let you share your business with your CA, and only as far as you allow.
• To reply to demo requests, help with setup, and talk to you about your trial or plan.
• To keep the service secure and working: preventing abuse, and fixing problems.

We do not sell your data, rent it, or use it for advertising.

3. Who can see it

• You and the people you add to your business.
• Your CA firm, only for the parts the business owner allows, and the owner can take that back at any time. When a CA firm keeps a client's books, the firm adds that client and syncs it; the owner can later join and take the books over.
• The Finyaara team, only to run the service, help you when you ask, or follow up on a trial or request.
• Service providers who host or deliver Finyaara for us: Render (servers and database) and its network provider Cloudflare. The website and app load fonts from Google Fonts, which sees your IP address.
• Authorities, only if the law requires it.

4. Where it is kept and for how long

Your data is stored on servers run for us by Render, our hosting provider. We keep your account and business data while you use Finyaara. When a trial ends, your data stays as it was so you can continue. If you ask us to delete it, we delete it within 30 days, except where the law requires us to keep something longer. Contact-form messages are kept until we no longer need them to follow up, or until you ask us to delete them.

5. Your browser

We use no advertising or tracking cookies and no analytics. The app keeps a few things in your browser so it works: your sign-in, the open business, your language and light or dark theme, and an anonymous device ID. This website remembers only your language choice.

6. Your rights

You can ask us for a summary of the personal data we hold about you, to correct it, or to delete it, and you can withdraw your consent. Business owners can remove their CA's access themselves in the app at any time. To make a request or a complaint, write to hello@finyaara.com or use this form, and tell us what you need; we reply within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

7. Security

Data travels encrypted (HTTPS). Passwords and sign-in tokens are stored only as one-way hashes. Each business's data is kept separate, and every request is checked against what that person may see. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

8. Children

Finyaara is for businesses and professionals. It is not meant for anyone under 18.

9. Changes

If we change this policy, we will update the date above, and tell you in the app if the change matters to how your data is used.