Privacy Policy

1. INTRODUCTION

Tryzent Technologies Private Limited ("Company," "We," "Us," or "Our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our CA Practice Management Software ("Service") available at https://capms.tryzent.com ("Platform").

This Privacy Policy applies to all users of our Service, including Chartered Accountants and their authorized personnel who access the Platform.

By using our Service, you consent to the data practices described in this Privacy Policy.

2. INFORMATION WE COLLECT

2.1 Personal Information You Provide

We collect information you directly provide to us, including:

2.2 Information Automatically Collected

When you use our Service, we automatically collect:

2.3 Information from Third Parties

We may receive information from:

• Payment processors (Razorpay and others)
• Government databases for verification purposes
• ICAI databases for credential verification
• Third-party integrations you authorize
• Business partners and service providers

3. HOW WE USE YOUR INFORMATION

3.1 Primary Purposes

We use your information to:

3.2 Business Operations

3.3 Communication

4. INFORMATION SHARING AND DISCLOSURE

4.1 We Do Not Sell Personal Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.2 Permitted Disclosures

We may share your information in the following circumstances:

4.3 Client Data Protection

Your clients data remains under your control. We act as a data processor for client information you store on our Platform:

• We only process client data according to your instructions
• We do not access or use client data for our own purposes
• We implement appropriate security measures to protect client data
• We assist you in meeting your obligations under data protection laws

5. DATA RETENTION

5.1 Retention Periods

We retain your information for different periods based on the type of data:

• Account Information: Retained while your account is active and for 7 years after account closure for legal compliance
• Client Data: Retained according to your instructions and legal requirements, typically 7-10 years for CA practice records
• Usage Data: Retained for up to 3 years for analytics and service improvement
• Support Communications: Retained for 5 years for quality assurance and legal compliance
• Financial Records: Retained for 7 years as required by Indian accounting standards

5.2 Data Deletion

You may request deletion of your data, subject to:

• Legal retention requirements
• Ongoing business needs
• Technical feasibility
• Professional regulatory requirements

Upon account termination, we provide a 30-day grace period for data export before deletion begins.

6. DATA SECURITY

6.1 Security Measures

We implement comprehensive security measures including:

6.2 Data Breach Response

In the event of a data breach:

• We will investigate and contain the incident within 24 hours
• Affected users will be notified within 72 hours
• Regulatory authorities will be notified as required by law
• We will provide support and remediation assistance
• A detailed incident report will be prepared and shared

7. YOUR RIGHTS AND CHOICES

7.1 Access and Control

You have the right to:

7.2 Data Portability

You can export your data from our Platform in commonly used formats:

• Client lists and contact information
• Financial records and transaction data
• Documents and file attachments
• Reports and analytics data

7.3 Communication Preferences

You can manage your communication preferences:

• Essential service notifications (cannot be disabled)
• Marketing and promotional emails
• Product updates and announcements
• Newsletter subscriptions

8. COOKIES AND TRACKING TECHNOLOGIES

8.1 Types of Cookies

We use the following types of cookies:

• Essential Cookies: Required for basic Platform functionality
• Performance Cookies: Help us analyze usage and improve performance
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Provide insights into user behavior and Platform usage

8.2 Cookie Management

You can control cookies through:

• Your browser settings
• Our cookie preference center
• Third-party opt-out tools
• Platform-specific privacy controls

8.3 Third-Party Analytics

We use analytics services including:

• Google Analytics (with anonymized IP addresses)
• Performance monitoring tools
• Error tracking and reporting systems
• User behavior analytics platforms

9. INTERNATIONAL DATA TRANSFERS

9.1 Data Location

Your data may be stored and processed in:

• Data centers located in India
• International cloud infrastructure providers
• Service provider facilities globally

9.2 Transfer Safeguards

For international transfers, we ensure:

• Adequate data protection standards
• Contractual data protection clauses
• Compliance with applicable transfer mechanisms
• Regular assessments of transfer arrangements

10. CHILDREN'S PRIVACY

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete such information promptly.

11. CHANGES TO THIS PRIVACY POLICY

11.1 Policy Updates

We may update this Privacy Policy periodically to reflect:

• Changes in our data practices
• New legal requirements
• Enhanced security measures
• Service improvements and new features

11.2 Notification of Changes

We will notify you of material changes through:

• Email notifications to registered users
• Prominent notices on our Platform
• In-app notifications and announcements
• Updates to this page with revision dates

11.3 Continued Use

Your continued use of the Service after policy changes constitutes acceptance of the updated Privacy Policy.

12. LEGAL BASIS FOR PROCESSING

12.1 Indian Law Compliance

Our data processing is based on:

• Contractual Necessity: Processing required to provide our Service
• Legal Obligations: Compliance with Indian laws and regulations
• Legitimate Interests: Business operations and service improvement
• Consent: Where specifically obtained for marketing or optional features

12.2 Professional Obligations

We recognize that Chartered Accountants have specific obligations under:

• ICAI Code of Ethics and professional standards
• Client confidentiality requirements
• Regulatory compliance obligations
• Professional indemnity considerations

13. CONTACT INFORMATION

13.1 Privacy Inquiries

For questions about this Privacy Policy or our data practices, contact us at:

13.2 Data Protection Requests

To exercise your privacy rights or submit data protection requests:

13.3 Response Time

We will respond to privacy inquiries and data protection requests within:

• General Inquiries: 5 business days
• Access Requests: 15 business days
• Deletion Requests: 30 business days
• Urgent Security Matters: 24 hours

14. COMPLIANCE AND CERTIFICATIONS

14.1 Regulatory Compliance

Our privacy practices comply with:

• Information Technology Act, 2000 and Rules
• Personal Data Protection Bill (when enacted)
• ICAI guidelines on data protection
• International best practices and standards

14.2 Security Certifications

We maintain relevant security certifications and undergo regular audits to ensure:

• Industry-standard security practices
• Compliance with regulatory requirements
• Continuous improvement of security measures
• Third-party validation of our practices