Last updated: 19 July 2026
Fincelo Technologies Private Limited ("Fincelo", "we", "us", or "our") operates the Fincelo platform, accessible via fincelo.app and app.fincelo.app (the "Service"). This Privacy Policy explains how we collect, use, share, and protect information when you use the Service. Fincelo is compliant with India's Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000.
Fincelo Technologies Private Limited is the data fiduciary for personal data processed through the Platform. For privacy inquiries, contact privacy@fincelo.app.
Account & identity data, Name, email, phone number, company name, designation, GSTIN, PAN, and CIN provided when you register or as required for compliance purposes.
Financial & billing data, Invoice data, contracts, POs, payment records, revenue recognition schedules, ARR/MRR figures, TDS records, 26AS reconciliation data, and GST return data. This is your data, processed strictly on your behalf as a data processor. Subscription payment information is handled directly by our payment partners (Razorpay for India, Stripe for international customers); Fincelo does not store your card details.
Integration data, Data from connected third-party services (CRM, payment gateways, accounting tools) as authorised by you.
AI processing data, Contracts uploaded for AI extraction are processed to provide the service under strict data processing agreements with our AI service providers.
Usage data, Log data including IP addresses, device information, feature-usage patterns, and timestamps, used solely for platform improvement and security. Never sold or shared with advertisers.
Contract performance, Processing financial data is necessary to provide the service.
Legal obligation, Compliance with GST law, TDS, and the Companies Act requires retention of certain financial records.
Legitimate interest, Security monitoring and fraud prevention.
Consent, For marketing communications, withdrawable at any time.
We use your data to provide and operate the Platform and its features; to generate invoices, recognition schedules, compliance reports, and board materials on your behalf; to interface with government portals (IRP, GSTN) for e-invoicing and GSTR-1 as authorised by you; to run AI agents within your defined guardrails; and to communicate platform updates and security notices. We do not sell your personal information.
We do not sell your data. We share data only with: payment processors (Razorpay, Stripe) for Fincelo subscription billing; government portals (IRP/GSTN, TRACES) as required by law; AI service providers under strict data processing agreements; and infrastructure providers (including Supabase for database and authentication) under equivalent data protection terms, as well as when required by law or court order. Your financial data is never shared with other Fincelo customers; workspace data is isolated using Row-Level Security.
AES-256 encryption at rest; TLS 1.3 in transit.
Row-level security (RLS) ensuring complete workspace isolation.
Role-based access controls with audit logging on all sensitive operations.
Regular security assessments and penetration testing.
Incident response aligned with DPDPA 2023 notification timelines.
Financial records are retained for a minimum of 7 years from the creation date, in compliance with the Companies Act, 2013, the Income Tax Act, 1961, and GST law. Account data is retained for the duration of your subscription plus 3 years, unless you request earlier deletion (subject to legal retention obligations).
Right of access, request a summary of the personal data we hold about you.
Right to correction, request correction of inaccurate data.
Right to erasure, request deletion, subject to legal retention requirements.
Right to grievance redressal, file a complaint with our Data Protection Officer.
Right to nominate, nominate a person to exercise these rights on your behalf.
To exercise your rights, email privacy@fincelo.app. We respond within 30 days as required by DPDPA 2023.
We use strictly necessary cookies for authentication, and analytics cookies (with your consent) to understand Platform usage. We do not use advertising or tracking cookies. You can manage your preferences in your account settings.
Data is primarily stored in India. Where data is transferred to processors outside India (e.g. AI service providers), we ensure equivalent data protection through contractual safeguards as required by DPDPA 2023.
Fincelo is a business-to-business platform not directed at individuals under 18, and we do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice before taking effect.
Data Protection Officer, Fincelo Technologies Private Limited. Email privacy@fincelo.app for privacy and grievance matters, or founders@fincelo.app for general queries.