Privacy policy

Who we are and what we hold

Munshiji is business-finance software for Indian businesses and their chartered accountants. We hold two kinds of personal data:

• Your account data: the names, email addresses, phone numbers and sign-in details of the people who use Munshiji. For this data we are the data fiduciary.
• Data your business puts into Munshiji: customers, suppliers, employees, invoices, payments, messages, call records and documents. Your business decides what goes in and why, so your business is the data fiduciary and we process it on your behalf, only to run the features you use.

How we use it

• To provide the service: invoices, reminders, books, payroll, compliance work and the CA workspace.
• To keep accounts secure, prevent misuse and keep an audit trail of important actions.
• To send service emails and messages you or your business asked for.
• To bill for subscriptions and meet our own tax and legal obligations.

We do not sell personal data and we do not use your business data for advertising.

AI features

Some features (Ask Munshiji, document reading, drafting messages and captions) send text to an AI model provider: Anthropic, OpenAI or Google, depending on the setting your business chose. AI features are off until your business turns them on.

• Before text is sent, Munshiji masks identifiers such as PAN, Aadhaar, phone numbers, email addresses, bank account and card numbers, and puts the real values back in the answer. Masking is on by default; a business admin can change it in the AI settings.
• We send only what the feature needs for that request.
• AI output is a draft. Regulated actions such as filings and payments need a person to approve them.

Call recordings

If your business records calls made through Munshiji, the call starts with a short notice that it may be recorded, unless the business has turned that notice off and informs callers another way. Recordings are deleted automatically after the retention period your business sets: 90 days unless changed, and never less than 7 days or more than 10 years.

Who we share it with

We use service providers to run Munshiji. Each gets only what it needs for its job:

• Hosting, database and file storage for the service itself.
• Messaging: Meta (WhatsApp), SMS gateways and email delivery, when your business sends messages.
• Calling and speech: Twilio, Plivo or Exotel, and Deepgram, ElevenLabs or Sarvam, when calls are used.
• Payments: Razorpay, for payment links and subscriptions.
• GST: a licensed GST Suvidha Provider, for e-invoices, e-way bills and returns your business files.
• AI model providers, as described above.

Your CA firm sees your business data only after you give it access, and you can withdraw that access at any time. We disclose data to authorities only when the law requires it.

How long we keep it

We keep data while your account is active. When an account is closed, the business can ask us to delete or anonymise its data, except records the law requires to be kept longer, such as tax invoices and books of account.

Security

Data travels over HTTPS. Stored secrets such as passwords for government portals and provider keys are encrypted. Access inside a business is controlled by roles, and sensitive actions are logged.

Your rights

Under the Digital Personal Data Protection Act, 2023 you can:

• ask what personal data we hold about you and who we shared it with;
• ask us to correct, complete or update it;
• ask us to erase it, subject to what the law requires us to keep;
• withdraw consent you gave, for example to marketing messages;
• nominate someone to act for you;
• raise a grievance with us, and then with the Data Protection Board of India.

If your data was added by a business that uses Munshiji, contact that business first; we will help it respond.

Contact and grievances

Write to hello@munshiji.in with the subject “Privacy”. We reply within 30 days.

Changes

If we change this policy in a way that matters, we will tell account holders by email before it applies.